CVE-2020-6418

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.122

Description The issue is related to a type confusion in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The vulnerability has been reportedly exploited in real-world incidents, including a case where it was used to achieve remote code execution on a Tesla Model 3.

Recommendations For versions prior to 80.0.3987.122, update to version 80.0.3987.122 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages or disabling JavaScript execution in untrusted contexts until the update can be applied.