| CVE-2020-3868 |
High |
Yes |
Arbitrary code execution |
Processing maliciously crafted web content may lead to arbitrary code execution. Credit to Marcin Towalski of Cisco Talos. |
| CVE-2020-3867 |
High |
Yes |
Cross-site scripting |
Processing maliciously crafted web content may lead to universal cross site scripting. |
| CVE-2020-3865 |
High |
Yes |
Sandbox escape |
A top-level DOM object context may have incorrectly been considered secure. |
| CVE-2020-3864 |
Medium |
Yes |
Same-origin policy bypass |
A DOM object context may not have had a unique security origin. |
| CVE-2020-3862 |
Medium |
Yes |
Denial of service |
A malicious website may be able to cause a denial of service. |