CVE-2020-6572
Google Chrome Media Use-After-Free Vulnerability
Published Jan 14, 2021 · updated Jun 16, 2026 · google chrome
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Timeline
Detection, updates, and resolution for this record.
Jan 14, 2021 · Catalog
Detected
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Jan 10, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jul 10, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Required action
Apply updates per vendor instructions.
CISA due date Jul 10, 2022
Affected
- cpe google/chromeversion unspecified
- vendor Google Chrome Mediaversion unspecified
Sources
- CISA KEVCVE-2020-6572
Google Chrome Media contains a use-after-free vulnerability that allows a remote attacker to execute code via a crafted HTML page.
cisa.gov - CVE.orgCVE-2020-6572
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-6572
30-day exploitation probability 10.6%
first.org - NIST NVDCVE-2020-6572
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
nvd.nist.gov