CVE-2020-6418General(debian / chrome)

LOWCVSS 8.8 · HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.

Weakness type (CWE)
CWE-843

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • debian_linux
  • enterprise_linux_desktop
  • enterprise_linux_server

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • PoC: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-08); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Products
chromedebian_linuxenterprise_linux_desktopenterprise_linux_serverenterprise_linux_workstationfedora

5 versions affected across 6 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-08: 1Mentions · 2026-09-12: 1Technical Details · 2026-09-12: 109-0809-12
Signal classification2 categories
General
150.0%
PoC
150.0%
Classification over time
DateTotalLabels
2026-09-081
General1
2026-09-121
PoC1
Full discourse2 posts
  • Ophir Harpaz@OphirHarpaz
    General

    <humbleBrag> This went pretty well! Here see what a colleague said </humbleBrag> (whoever wants to chat about CVE-2020-6418 or CVE-2022-4262, reach out. Yes, I did 2 and not 3.) https://t.co/ZLfh4RJ0N4

    Post summary

    The tweet merely indicates willingness to discuss CVE-2020-6418 and CVE-2022-4262 without providing detailed technical information, PoCs, exploits, or remediation guidance.

    3001611.7K
    12.7K followersView on X
  • Alejandro Torres Ramirez@torrescrack
    PoC

    Vulnerabilidad CVE-2020-6418 en Chromium 80 sobre Windows 11 ARM: confirmé ejecución de shellcode dentro del renderer. #CVE20206418 #Chromium #V8 #ExploitDevelopment #ReverseEngineering #CyberSecurity https://t.co/fxxkuyTN9d

    Post summary

    The tweet confirms shellcode execution (a PoC) for CVE-2020-6418 in Chromium 80 on Windows 11 ARM without providing exploit code or patch information.

    00010100
    79 followersView on X
CPE platform detail8 entries

8 of 8 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux10.0--
OSdebiandebian_linux9.0--
OSfedoraprojectfedora30--
OSfedoraprojectfedora31--
Appgooglechrome---
OSredhatenterprise_linux_desktop6.0--
OSredhatenterprise_linux_server6.0--
OSredhatenterprise_linux_workstation6.0--

Explore more