Skip to content
OpenAdvisories

Package · NuGet

CefSharp.Common

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 5.3
    CVE-2026-48796

    CefSharp: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder

    CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications. Prior to version 148.0.90, CefSharp/SchemeHandler/FolderSchemeHandlerFactory.cs used filePath.StartsWith(rootFolder, String…

    cefsharp CefSharp CefSharp.Common NuGet
  • High —
    GHSA-4c29-gfrp-g6x9

    CefSharp affected by libvpx's heap buffer overflow in vp8 encoding

    Google is aware that an exploit for CVE-2023-5217 exists in the wild. Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a …

    CefSharp.Common CefSharp.Common.NETCore NuGet
  • Critical —
    GHSA-j646-gj5p-p45g

    CefSharp affected by heap buffer overflow in WebP

    **Google is aware that an exploit for [CVE-2023-4863](https://www.cve.org/CVERecord?id=CVE-2023-4863) exists in the wild.** ### Description Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bo…

    CefSharp.Common CefSharp.Common.NETCore NuGet
  • High 8.8
    CVE-2022-0609 Exploited EPSS 22%

    Use after free in Animation

    Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine NuGet
    KEV Feb 15, 2022
  • Critical 9.6
    CVE-2020-16017 Exploited

    Use after free in CefSharp

    Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-16013 Exploited

    Inappropriate implementation in V8 in CefSharp

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-16009 Exploited EPSS 48%

    Inappropriate implementation in V8

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
    KEV Nov 3, 2021
  • Critical 9.6
    CVE-2020-15999 Exploited Public exploit EPSS 64%

    Heap buffer overflow in CefSharp

    Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Alpine NuGet
    KEV Nov 3, 2021