Use after free in CefSharp
CVE-2020-16017: Use after free in site isolation
Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.
There is currently little to no public information on the issue other than it has been flagged as High severity.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact(severity-tier estimate) | 80.00 |
| Exploitation signal(KEV listed) | ×1.50 |
| VPI | 100.00 |
VPI formula vpi-v1
Required Action
Apply updates per vendor instructions.