{"id":"CVE-2020-16010","kind":"vulnerability","aliases":["CVE-2020-16010"],"related":[],"title":"Google Chrome for Android UI: Google Chrome for Android UI Heap Buffer Overflow Vulnerability","description":"Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.\n\nCISA required action: Apply updates per vendor instructions.","summary":"A heap buffer overflow in the Chrome for Android UI lets an attacker who already controls the renderer process escape the browser sandbox. Exploitation is confirmed in the wild, per CISA's Known Exploited Vulnerabilities catalog.","severity":"critical","cvss":9.6,"epss":0.06363,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Google Chrome for Android UI","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","chrome","exploited","mobile","runtime"],"not_affected_if":["chrome-not-installed","patched-device"],"how_to_check":"Open Chrome on the device and check the version under Settings > About Chrome; compare it with the fixed release in the vendor notice.","fix":"Update Chrome for Android to the latest release through Google Play, per the vendor instructions CISA references.","status":"open","published_at":"2020-11-03T03:15:15+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:39:49+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-23T21:39:49Z","model":"claude-haiku-5-5","output":{"fix":"Update Chrome for Android to the latest release through Google Play, per the vendor instructions CISA references.\nunknown","reach":"internet","impact":"high","summary":"A heap buffer overflow in the Chrome for Android UI lets an attacker who already controls the renderer process escape the browser sandbox. Exploitation is confirmed in the wild, per CISA's Known Exploited Vulnerabilities catalog.","category":"runtime","who_cares":["chrome","android","mobile"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker escapes renderer sandbox and gains browser-level code execution on device","analyst_note":"Sources do not give the fixed Chrome version; check the Chrome Releases blog and the CISA KEV entry for the patched build and the remediation due date.","how_to_check":"Open Chrome on the device and check the version under Settings > About Chrome; compare it with the fixed release in the vendor notice.\nunknown","needs_analyst":true,"not_affected_if":["chrome-not-installed","patched-device"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000488,"input_tokens":2861,"output_tokens":403,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-16010':17A,20A '-2020':16A,19A 'action':102C 'allow':79C 'alreadi':45B 'android':4A,9A,24A,26B,39B,70C 'appli':103C 'attack':43B,82C 'browser':52B 'buffer':12A,33B,75C 'catalog':66B 'chrome':2A,7A,22A,27B,37B,68C 'cisa':61B,100C 'compromis':85C 'confirm':56B 'contain':72C 'control':46B 'craft':97C 'cve':15A,18A 'escap':50B,94C 'exploit':28B,54B,64B 'for':23A 'googl':1A,6A,67C 'google':21A 'heap':11A,32B,74C 'html':98C 'instruct':107C 'known':63B 'let':41B 'mobil':29B 'overflow':13A,34B,76C 'page':99C 'per':60B,105C 'perform':91C 'potenti':90C 'process':49B,88C 'remot':81C 'render':48B,87C 'requir':101C 'runtim':30B 'sandbox':53B,93C 'ui':5A,10A,25A,40B,71C 'updat':104C 'vendor':106C 'via':95C 'vulner':14A,65B,77C 'wild':59B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-11-03T03:15:15+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-16010","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16010","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T16:39:49+00:00","note":null},{"source":"epss","external_id":"CVE-2020-16010","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-16010","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-16010","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16010","severity":null,"published_at":"2020-11-03T03:15:15+00:00","modified_at":"2026-06-17T02:57:37+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}