Remote Code Execution (RCE) Affecting cefsharp.common Open this link in a new tab package, versions [, 86.0.241)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.Test your applications
4 Nov 2020
2 Nov 2020
How to fix?
CefSharp.Common to version 86.0.241 or higher.
CefSharp.Common is a the CefSharp Chromium-based browser component ('Core' and common 'Element' components, needed by both WPF and WinForms).
Affected versions of this package are vulnerable to Remote Code Execution (RCE). A vulnerability exists in V8 implementation of Google Chrome that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. There is currently little to no public information on the issue other than it has been flagged as