HIGH
GHSA-gvqv-779r-4jgp
Use after free in CefSharp
Quick fix
GHSA-gvqv-779r-4jgp — CefSharp.Common: upgrade to the fixed version with the command below.
dotnet add package CefSharp.Common --version 86.0.241Details
CVE-2020-16017: Use after free in site isolation
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017
Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.
There is currently little to no public information on the issue other than it has been flagged as `High` severity.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/CefSharp.Common
Introduced in:
0Fixed in: 86.0.241Fix
dotnet add package CefSharp.Common --version 86.0.241NuGet/CefSharp.Wpf
Introduced in:
0Fixed in: 86.0.241Fix
dotnet add package CefSharp.Wpf --version 86.0.241NuGet/CefSharp.WinForms
Introduced in:
0Fixed in: 86.0.241Fix
dotnet add package CefSharp.WinForms --version 86.0.241NuGet/CefSharp.Wpf.HwndHost
Introduced in:
0Fixed in: 86.0.241Fix
dotnet add package CefSharp.Wpf.HwndHost --version 86.0.241