Google · Chrome for Android UI
CVE-2020-16010
Google Chrome for Android UI Heap Buffer Overflow Vulnerability
Qué es
Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CISA: Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 3 de mayo de 2022
Más fallos explotados de Google
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 27 oct 2026 | Unchecked Return Value | Brotli | Crítica 9,2 | 55% |
| 16 sept 2026 | Improper Authorization | Pixel | Alto 8,8 | 0,6% |
| 9 sept 2026 | Out of Bounds Write | Chromium V8 | Alto 8,8 | 3,5% |
| 4 sept 2026 | Type Confusion | Chromium V8 | Alto 8,8 | 1,8% |
| 9 jun 2026 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 2,4% |
| 1 abr 2026 | Use-After-Free | Dawn | Alto 8,8 | 14% |
| 13 mar 2026 | Out-of-Bounds Write | Skia | Alto 8,8 | 2,3% |
| 13 mar 2026 | Improper Restriction of Operations Within the Bounds of a Memory Buffer | Chromium V8 | Alto 8,8 | 2,7% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.