Critical 1 exploited CVE DSA-4777-1 1 CVE

freetype - security update

Published Oct 21, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	freetype	2.9.1-3+deb10u2

Vulnerabilities 1

Critical 9.6

CVE-2020-15999 Exploited Public exploit EPSS 64%

Heap buffer overflow in CefSharp

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet

Nov 3, 2020
KEV Nov 3, 2021