Vulnerability Spotlight: Memory corruption in Google PDFium
Summary: Cisco Talos discovered a memory corruption vulnerability, tracked as TALOS-2020-1092 and CVE-2020-6513, in how Google Chrome 83.0.4103.61 executes JavaScript inside PDF documents, allowing out-of-bounds memory access. An adversary can trigger it by getting a victim to visit a malicious webpage or open a malicious PDF, and Talos worked with Google to resolve the issue and release an update.
What's compelling: The trigger is a single visit to a malicious page or a single opened PDF in Chrome, and Talos confirmed version 83.0.4103.61 is affected - so any endpoint still on that build carries the exposure until it is updated.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-6513
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026