BS
Product
Backports Sle
On CISA KEVExploited in the wild
326
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 169Medium 129Low 1
Watch
Add Backports Sle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: 15.0; 15.0 |
| CVE-2020-16008 | 8.8 | Nov 3 | Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet Affected: 15.0; 15.0 |
| CVE-2020-16006 | 8.8 | Nov 3 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-16005 | 8.8 | Nov 3 | Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-16004 | 8.8 | Nov 3 | Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-16003 | 8.8 | Nov 3 | Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-16002 | 8.8 | Nov 3 | Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 15.0 |
| CVE-2020-16001 | 8.8 | Nov 3 | Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-16000 | 8.8 | Nov 3 | Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15992 | 8.8 | Nov 3 | Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin… Affected: 15.0 |
| CVE-2020-15991 | 8.8 | Nov 3 | Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 15.0 |
| CVE-2020-15990 | 8.8 | Nov 3 | Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 15.0 |
| CVE-2020-15987 | 8.8 | Nov 3 | Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream Affected: 15.0 |
| CVE-2020-15979 | 8.8 | Nov 3 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15978 | 8.8 | Nov 3 | Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass… Affected: 15.0 |
| CVE-2020-15976 | 8.8 | Nov 3 | Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15975 | 8.8 | Nov 3 | Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15974 | 8.8 | Nov 3 | Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page Affected: 15.0 |
| CVE-2020-15972 | 8.8 | Nov 3 | Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15971 | 8.8 | Nov 3 | Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 15.0 |
| CVE-2020-15970 | 8.8 | Nov 3 | Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 15.0 |
| CVE-2020-15969 | 8.8 | Nov 3 | Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15968 | 8.8 | Nov 3 | Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-15967 | 8.8 | Nov 3 | Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 15.0 |
| CVE-2020-6576 | 8.8 | Sep 21 | Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6559 | 8.8 | Sep 21 | Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-15965 | 8.8 | Sep 21 | Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-15964 | 8.8 | Sep 21 | Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-15962 | 8.8 | Sep 21 | Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML… Affected: 15.0; 15.0 |
| CVE-2020-15960 | 8.8 | Sep 21 | Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-24972 | 8.8 | Aug 29 | The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe… Affected: 15.0 |
| CVE-2020-24614 | 8.8 | Aug 25 | Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code Affected: 15.0; 15.0 |
| CVE-2020-8233 | 8.8 | Aug 17 | A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface,… Affected: 15.0; 15.0 |
| CVE-2020-6534 | 8.8 | Jul 22 | Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6533 | 8.8 | Jul 22 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6530 | 8.8 | Jul 22 | Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially… Affected: 15.0; 15.0 |
| CVE-2020-6525 | 8.8 | Jul 22 | Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6524 | 8.8 | Jul 22 | Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6523 | 8.8 | Jul 22 | Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6520 | 8.8 | Jul 22 | Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6518 | 8.8 | Jul 22 | Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap… Affected: 15.0 |
| CVE-2020-6517 | 8.8 | Jul 22 | Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6515 | 8.8 | Jul 22 | Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6513 | 8.8 | Jul 22 | Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 15.0; 15.0 |
| CVE-2020-6512 | 8.8 | Jul 22 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6496 | 8.8 | Jun 3 | Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 15.0 |
| CVE-2020-6474 | 8.8 | May 21 | Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6468 | 8.8 | May 21 | Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6467 | 8.8 | May 21 | Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2020-6463 | 8.8 | May 21 | Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
