Detections
Analytics
CVE-2020-6418
high
Description
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
From the Tenable Blog
CVE-2020-6418: Google Chrome Type Confusion Vulnerability Exploited in the Wild
Published: 2020-02-24
Google is aware of reports that a type confusion flaw in Google Chrome has been exploited in the wild. Background On February 24, Google released a new stable channel update for Google Chrome for Desktop to address several vulnerabilities, including one that has been reportedly exploited in the wild.
References
https://www.trendmicro.com/en_us/research/24/l/earth-minotaur.html
https://www.tenable.com/cyber-exposure/2020-threat-landscape-retrospective
https://github.com/lutfizp/cveRnD
https://github.com/J0hnFFFF/chrome_cve
https://github.com/Azrael-01/CVE-Exploitations
https://github.com/ulexec/ChromeSHELFLoader
https://github.com/star-sg/CVE
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-6418
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html