CVE-2020-16018

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.66

Description The issue is related to a use after free in the payments component of Google Chrome, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This can be achieved via a crafted HTML page. The attacker may be able to execute arbitrary code.

Recommendations For versions prior to 87.0.4280.66, update to version 87.0.4280.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the payments component until the update is applied.