CVE-2020-6572

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jan 14, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
Jan 10, 2022
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-65739.6Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer procesCVE-2020-65747.8Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieveCVE-2020-65758.3Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perfoCVE-2020-65768.8Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption CVE-2020-65779.8The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection.CVE-2020-65786.1Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includesCVE-2020-65796.1Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php in the MailBeez pCVE-2020-65817.3Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n as the character \ and the character n (notCVE-2020-65827.5Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number CVE-2020-65836.1BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulneCVE-2020-65846.5Nagios Log Server 2.1.3 has Incorrect Access Control.CVE-2020-65858.8Nagios Log Server 2.1.3 has CSRF.
CVE-2020-6572: High severity, CVSS 8.8 | Vulnix