Vulnerability identifier: #VU25567

Vulnerability risk: Critical

CVSSv3.1: 8.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2020-6418

CWE-ID: CWE-843

Exploitation vector: Network

Exploits in database: 9

• February 22, 2022
  • ChromeSHELFLoader (An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2) [Github]
• August 23, 2021
  • CVE (A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.) [Github]
• June 17, 2021
  • Google Chrome 80 - JSCreate Side-effect Type Confusion (Metasploit) [Exploit-DB]
• May 3, 2021
  • cve-2020_6418-exploit (cve-2020_6418-exploittt.js) [Github]
• September 21, 2020
  • CVE-Vulnerability (A record of some vulnerabilities, as well as some detection and exploitation scripts) [Github]
• September 16, 2020
  • CVE-2020-6418-PoC (for 供養) [Github]
• June 19, 2020
  • CVE_2020_6418_PoC (for 供養) [Github]
• March 18, 2020
  • CVE-2020-6418 (PoC of CVE) [Github]
  • Google Chrome 80 JSCreate side-effect type confusion exploit [Metasploit]

Impact: Code execution

Vulnerable software:
Google Chrome
Client/Desktop applications / Web browsers

Vendor: Google