CVEs published November 3, 2020
53 CVEs were published on November 3, 2020: 2 critical, 3 high. 3 are now in CISA KEV.
- Published
- 53
- Critical
- 2
- High
- 3
- Medium
- 2
- Low
- 1
- Unrated
- 45
- Now in CISA KEV
- 3
- Fix available
- 50
Most affected products
- Google Chrome
- 44
- Facebook WhatsApp Business for iOS · Facebook WhatsApp for…
- 2
- Google Chrome · CefSharp.Common +3
- 2
- BookStackApp BookStack
- 1
- BookStackApp BookStack · ssddanbrown/bookstack
- 1
- IBM App Connect Enterprise Certified Container
- 1
- IBM Maximo Anywhere
- 1
- IBM Planning Analytics Local · IBM Planning Analytics Works…
- 1
Critical 2
- CVE-2020-16010Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2020-15999Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption viGoogle Chrome · CefSharp.Common +3
High 3
- CVE-2020-26211Cross-Site Scripting in BookStackBookStackApp BookStack · ssddanbrown/bookstack
- CVE-2020-26210Cross-Site Scripting in BookStackBookStackApp BookStack
- CVE-2020-16009Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption Google Chrome · CefSharp.Common +3
Medium, low and unrated 48
- CVE-2020-1909A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resFacebook WhatsApp Business for iOS · Facebook WhatsApp for…
- CVE-2020-1908Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of SFacebook WhatsApp Business for iOS · Facebook WhatsApp for…
- CVE-2020-4785IBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow a remote attacker to hijack the clicking acIBM App Connect Enterprise Certified Container
- CVE-2020-4649IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TMIBM Planning Analytics Local · IBM Planning Analytics Works…
- CVE-2019-4349IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that couldIBM Maximo Anywhere
- CVE-2020-6557Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via aGoogle Chrome
- CVE-2020-16011Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2020-16007Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege Google Chrome
- CVE-2020-16008Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption viGoogle Chrome
- CVE-2020-16004Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption viGoogle Chrome
- CVE-2020-16005Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruGoogle Chrome
- CVE-2020-16006Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2020-16002Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2020-16003Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2020-16000Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruptiGoogle Chrome
- CVE-2020-16001Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2020-15998Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentialGoogle Chrome
- CVE-2020-15997Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2020-15995Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2020-15996Use after free in passwords in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2020-15993Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2020-15994Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HGoogle Chrome
- CVE-2020-15991Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2020-15992Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2020-15989Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information frGoogle Chrome
- CVE-2020-15990Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to poteGoogle Chrome
- CVE-2020-15987Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2020-15988Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the uGoogle Chrome
- CVE-2020-15985Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTGoogle Chrome
- CVE-2020-15986Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2020-15983Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content securityGoogle Chrome
- CVE-2020-15984Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of Google Chrome
- CVE-2020-15981Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information froGoogle Chrome
- CVE-2020-15982Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive inforGoogle Chrome
- CVE-2020-15978Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2020-15979Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2020-15980Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation rGoogle Chrome
- CVE-2020-15976Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2020-15977Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensiGoogle Chrome
- CVE-2020-15974Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.Google Chrome
- CVE-2020-15975Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2020-15973Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a mGoogle Chrome
- CVE-2020-15970Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentialGoogle Chrome
- CVE-2020-15971Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to poteGoogle Chrome
- CVE-2020-15968Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2020-15969Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2020-15967Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crGoogle Chrome
- CVE-2020-15972Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome