{"vulnerability": "cve-2020-1597", "sightings": [{"uuid": "cc09d884-58f8-44bd-9f43-30043038a9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15972", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2873", "content": "#exploit\n1. CVE-2020-6507:\nChrome RCE on macOS 11.2.1\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\n2. CVE-2020-15972, CVE-2021-21114:\nUaF in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2024-05-07T14:30:28.000000Z"}, {"uuid": "5a2718c1-1f65-4eb2-b70d-e30bb7e10154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15972", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2989", "content": "#Threat_Research\nGoogle Chrome Renderer RCE (PoC for CVE-2020-15972)\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_renderer\n]-> Full exploit:\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/blink/CVE-2020-15972", "creation_timestamp": "2021-03-26T11:01:10.000000Z"}, {"uuid": "14a3b2f6-a0bb-4587-98d9-a45579f0d118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15973", "type": "seen", "source": "https://t.me/cibsecurity/15796", "content": "\u203c CVE-2020-15973 \u203c\n\nInsufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-03T07:39:57.000000Z"}, {"uuid": "abd6a18c-b889-46f8-803e-b2ad8f05aa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15972", "type": "seen", "source": "https://t.me/cissp/2705", "content": "CVE-2021-21123, CVE-2021-21129, CVE-2021-21130, CVE-2021-21131, CVE-2021-21141:\nGoogle Chrome File System Access API vulnerabilities (PoC)\nhttps://github.com/Puliczek/CVE-2021-21123-PoC-Google-Chrome\n\nExploration of x86-64 ISA using speculative execution\nhttps://github.com/can1357/haruspex\n]-> Speculating The Entire X86-64 Instruction Set In Seconds:\nhttps://blog.can.ac/2021/03/22/speculating-x86-64-isa-with-one-weird-trick\n\nRed Team Tactics\nExploiting JSON Web Token\nhttps://medium.com/@sajan.dhakate/exploiting-json-web-token-jwt-73d172b5bc02\n\nFuzzing Windows\nhttps://github.com/intel/kernel-fuzzer-for-xen-project/wiki/Fuzzing-Windows\n\nThreat Research\nGoogle Chrome Renderer RCE (PoC for CVE-2020-15972)\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_renderer\n]-> Full exploit:\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/blink/CVE-2020-15972", "creation_timestamp": "2026-09-01T17:00:57.243332Z"}, {"uuid": "60004ba1-9d9f-4d17-bc4d-62623fad7341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15972", "type": "seen", "source": "https://t.me/cissp/2491", "content": "Malware analysis\ud83d\ude01\nMicrosoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique\nhttps://www.zscaler.com/blogs/security-research/microsoft-themed-phishing-attack-targets-executives-using-fake-google\n\nOffensive security\ud83d\udc40\n1. The Universal SSL pinning bypass for Android applications\nhttps://infosecwriteups.com/hail-frida-the-universal-ssl-pinning-bypass-for-android-e9e1d733d29\n2. Reverse Engineering a Flutter app by recompiling Flutter Engine\nhttps://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine\n\nThreat Research\n\"Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses\", 2021.\nhttps://orenlab.sise.bgu.ac.il/p/PP0?k\n]-> Artifact Repository:\nhttps://github.com/Yossioren/pp0\n]-> .pdf:\nhttps://orenlab.sise.bgu.ac.il/p/PP0.pdf\n\nRed Team Tactics:\nContent Security Policy\u00a0(CSP) Bypass Guidelines\nhttps://brutelogic.com.br/blog/csp-bypass-guidelines\nCSP Reference:\nhttps://content-security-policy.com\n\nCVE-2020-6507:\nChrome RCE on macOS 11.2.1 (PoC)\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\nCVE-2020-15972, CVE-2021-21114:\nUse-after-free (UaF) in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2026-09-01T17:01:00.651140Z"}, {"uuid": "bda7a585-9fd2-44df-b584-acce2f0d6121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15972", "type": "seen", "source": "https://t.me/cissp/2705", "content": "CVE-2021-21123, CVE-2021-21129, CVE-2021-21130, CVE-2021-21131, CVE-2021-21141:\nGoogle Chrome File System Access API vulnerabilities (PoC)\nhttps://github.com/Puliczek/CVE-2021-21123-PoC-Google-Chrome\n\nExploration of x86-64 ISA using speculative execution\nhttps://github.com/can1357/haruspex\n]-> Speculating The Entire X86-64 Instruction Set In Seconds:\nhttps://blog.can.ac/2021/03/22/speculating-x86-64-isa-with-one-weird-trick\n\nRed Team Tactics\nExploiting JSON Web Token\nhttps://medium.com/@sajan.dhakate/exploiting-json-web-token-jwt-73d172b5bc02\n\nFuzzing Windows\nhttps://github.com/intel/kernel-fuzzer-for-xen-project/wiki/Fuzzing-Windows\n\nThreat Research\nGoogle Chrome Renderer RCE (PoC for CVE-2020-15972)\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_renderer\n]-> Full exploit:\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/blink/CVE-2020-15972", "creation_timestamp": "2026-09-02T01:04:47.769495Z"}, {"uuid": "70b44a90-0852-4115-a772-9707d93be342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15972", "type": "seen", "source": "https://t.me/cissp/2491", "content": "Malware analysis\ud83d\ude01\nMicrosoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique\nhttps://www.zscaler.com/blogs/security-research/microsoft-themed-phishing-attack-targets-executives-using-fake-google\n\nOffensive security\ud83d\udc40\n1. The Universal SSL pinning bypass for Android applications\nhttps://infosecwriteups.com/hail-frida-the-universal-ssl-pinning-bypass-for-android-e9e1d733d29\n2. Reverse Engineering a Flutter app by recompiling Flutter Engine\nhttps://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine\n\nThreat Research\n\"Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses\", 2021.\nhttps://orenlab.sise.bgu.ac.il/p/PP0?k\n]-> Artifact Repository:\nhttps://github.com/Yossioren/pp0\n]-> .pdf:\nhttps://orenlab.sise.bgu.ac.il/p/PP0.pdf\n\nRed Team Tactics:\nContent Security Policy\u00a0(CSP) Bypass Guidelines\nhttps://brutelogic.com.br/blog/csp-bypass-guidelines\nCSP Reference:\nhttps://content-security-policy.com\n\nCVE-2020-6507:\nChrome RCE on macOS 11.2.1 (PoC)\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\nCVE-2020-15972, CVE-2021-21114:\nUse-after-free (UaF) in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2026-09-02T01:04:51.439020Z"}]}