Sign in
Deutsch English Español Polski
High

Inappropriate implementation in V8 in CefSharp

  • Disclosed: 27.11.2020
  • Updated: 11.10.2026 11:23

CISA confirms exploitation of this vulnerability in real attacks. Prioritise checking whether your application is affected. CISA KEV · CC0 1.0

High CVE-2020-16013: Inappropriate implementation in V8.

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as High severity.

Affected software

Click a technology to see all vulnerabilities affecting it.

PlatformPackageVulnerable versionsFixed in
.NET (NuGet) CefSharp.Common < 86.0.241 86.0.241
.NET (NuGet) CefSharp.WinForms < 86.0.241 86.0.241
.NET (NuGet) CefSharp.Wpf < 86.0.241 86.0.241
.NET (NuGet) CefSharp.Wpf.HwndHost < 86.0.241 86.0.241

References

CVSS score -
Weakness (CWE)
CWE-119, CWE-787
Platform
.NET (NuGet)
Package
CefSharp.Common, CefSharp.WinForms, CefSharp.Wpf
Disclosed
27.11.2020
Updated
11.10.2026 11:23

Sources and licenses

OSV / GitHub Advisory Database - GHSA-x7fx-mcc9-27j7 - CC BY 4.0

Vulnerability history: CefSharp.Common

All published vulnerabilities of this package (.NET (NuGet)), newest first. Shows whether this is a one-off slip or a package that needs watching.

Total entries
8
First → latest
10.2020 06.2026
Without a fix
0
Exploited in attacks
5

Severity breakdown

  • Critical 1
  • High 5
  • Medium 2

Disclosures per year

  1. CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder
    Medium · 5.3 CVE-2026-48796 < 148.0.90 148.0.90
  2. CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
    High ghsa-4c29-gfrp-g6x9 < 117.2.20 117.2.20
  3. CefSharp affected by heap buffer overflow in WebP
    Critical ghsa-j646-gj5p-p45g < 116.0.230 116.0.230
  4. Use after free in Animation
    High · 8.8 Exploited in attacks CVE-2022-0609 < 98.1.210 98.1.210
  5. Inappropriate implementation in V8
    High · 8.8 Exploited in attacks CVE-2020-16009 < 86.0.241 86.0.241
  6. Use after free in CefSharp
    High Exploited in attacks CVE-2020-16017 < 86.0.241 86.0.241
  7. Inappropriate implementation in V8 in CefSharp this entry
    High Exploited in attacks CVE-2020-16013 < 86.0.241 86.0.241
  8. Heap buffer overflow in CefSharp
    Medium · 6.5 Exploited in attacks CVE-2020-15999 < 85.3.130 85.3.130

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application
DockRay newsletter

Application security in your inbox

Important vulnerabilities, actionable guidance and practical advice for your applications. Choose your technologies and follow what matters to your project.

  • A daily digest of new vulnerabilities, critical ones included.
  • Notifications about important updates.
  • Practical advice on application security and monitoring.

Leave empty to receive updates for every technology.

Privacy policy

Free to subscribe. Unsubscribe with one click in any email.