Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2020-16009

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 8.8 · HighBuzz score 65.9KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 65.9

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 26.4 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
26.4
13 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
13 source links · newest first
  • A threat actor exploited 11 zero-day flaws in 2020 campaignsSecurity Affairs

    A hacking group has employed at least 11 zero-day flaws as part of an operation that took place in 2020 and targeted Android, iOS, and Windows users. Google’s Project Zero security team published a report about the activity of a mysterious hacking group that operated over the course of 2020 and exploited at least 11 […]

    newssecurityaffairs.comMar 20, 2021, 8:11 PM
  • Google fixes the third actively exploited Chrome 0-Day since JanuarySecurity Affairs

    Google has addressed a new zero-day flaw in its Chrome browser that has been actively exploited in the wild, the second one within a month Google has fixed a new actively exploited zero-day in its Chrome browser, this is the second zero-day issue addressed by the IT giant within a month. The flaw, tracked as […]

    newssecurityaffairs.comMar 15, 2021, 8:13 AM
  • Google addresses Chrome zero-day flaw actively exploited in the wildSecurity Affairs

    Google has addressed an actively exploited zero-day vulnerability, tracked as CVE-2021-21148, with the release of the Chrome 88.0.4324.150 version. Google released Chrome 88.0.4324.150 version that addressed an actively exploited zero-day security vulnerability. The vulnerability is a Heap buffer overflow that resides in the V8, which is an open-source high-performance JavaScript and WebAssembly engine, written in C++. The flaw […]

    newssecurityaffairs.comFeb 4, 2021, 11:51 PM
  • Google Patches Two More Chrome Zero-Days Exploited in AttacksSecurityWeek

    Google has released another update for Chrome 86 to patch two more zero-day vulnerabilities that have been exploited in the wild.

    newswww.securityweek.comNov 12, 2020, 12:08 PM
  • Google addresses two new Chrome zero-day flawsSecurity Affairs

    Google has released Chrome version 86.0.4240.198 that addresses two additional zero-day vulnerabilities that were exploited in the wild. Google has addressed two zero-day vulnerabilities, actively exploited in the wild, with the release of Chrome version 86.0.4240.198. The IT giant has fixed a total of five Chrome zero-day vulnerabilities in only three weeks. Both zero-day flaws, […]

    newssecurityaffairs.comNov 12, 2020, 8:09 AM
  • Hat trick for Google as it patches two more zero-days in ChromeMalwarebytes Labs

    Slightly over a week ago we advised you to update your Chrome browser. That warning came only a week or so…

    newswww.malwarebytes.comNov 11, 2020, 5:00 PM
  • 9th November – Threat Intelligence BulletinCheck Point Research

    For the latest discoveries in cyber research for the week of 9th November, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Check Point Research has alerted against a wave of ransomware attacks targeting Israeli companies and corporations, using known ransomware families such as REvil and Ryuk, as well as a new family called […]

    vendorresearch.checkpoint.comNov 9, 2020, 4:25 PM
  • Week in review: Windows zero-day exploited, Patch Tuesday forecast, selecting a compliance solutionHelp Net Security

    Here’s an overview of some of last week’s most interesting news, reviews and articles: Git LFS vulnerability allows attackers to compromise targets’ Windows systems (CVE-2020-27955) A critical vulnerability (CVE-2020-27955) in Git Large File Storage (Git LFS), an open source Git extension for versioning large files, allows attackers to achieve remote code execution if the Windows-using victim is tricked into cloning the attacker’s malicious repository using a vulnerable Git version control tool, security researcher Dawid Golunski … More →

    newswww.helpnetsecurity.comNov 8, 2020, 9:45 AM
  • Apple addresses three actively exploited iOS zero-daysSecurity Affairs

    Apple released iOS 14.2 that addressed three zero-day vulnerabilities in its mobile OS that have been abused in attacks in the wild. Apple has addressed three iOS zero-day vulnerabilities actively exploited in attacks the wild and affecting iPhone, iPad, and iPod devices. The zero-day vulnerabilities have been fixed by the IT giant with the release of iOS […]

    newssecurityaffairs.comNov 5, 2020, 9:33 PM
  • Google fixes two actively exploited Chrome zero-days (CVE-2020-16009, CVE-2020-16010)Help Net Security

    For the third time in two weeks, Google has patched Chrome zero-day vulnerabilities that are being actively exploited in the wild: CVE-2020-16009 is present in the desktop version of the browser, CVE-2020-16010 in the mobile (Android) version. About the vulnerabilities (CVE-2020-16009, CVE-2020-16010) As per usual, Google has refrained from sharing much detail about each of the patched vulnerabilities, so all we know is this: CVE-2020-16009 is an inappropriate implementation flaw in V8, Chrome’s open source … More →

    newswww.helpnetsecurity.comNov 4, 2020, 12:03 PM
  • Google Patches Actively Exploited Chrome VulnerabilitiesSecurityWeek

    Google has released updates to address multiple vulnerabilities in the Chrome browser, including two that are actively exploited in attacks. Chrome 86.0.4240.183 for Windows, macOS, and Linux was pushed to the stable channel with patches for a total of seven vulnerabilities, all of which feature a severity rating of high.

    newswww.securityweek.comNov 3, 2020, 2:35 PM
  • Google fixes the second zero-day in Chrome in 2 weeks actively exploitedSecurity Affairs

    Google released Chrome 86.0.4240.183 for Windows, Mac, and Linux to fix 10 security vulnerabilities, including an RCE zero-day exploited in the wild. Google has released Chrome 86.0.4240.183 for Windows, Mac, and Linux that address ten security vulnerabilities including a remote code execution (RCE) zero-day (CVE-2020-16009) exploited by threat actors in the wild. The RCE is […]

    newssecurityaffairs.comNov 3, 2020, 8:20 AM
  • Update your Chrome again as Google patches second zero-day in two weeksMalwarebytes Labs

    Before you start to Google for election news, we’d like you to check whether your browser is at the latest and…

    newswww.malwarebytes.comNov 2, 2020, 5:00 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence