{"vulnerability": "CVE-2020-16012", "sightings": [{"uuid": "a8d30efb-690d-48b0-8b57-13aa8a1f8ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4774d22", "content": "", "creation_timestamp": "2025-06-15T21:02:19.553076Z"}, {"uuid": "c09c6113-d2d0-4532-bc87-6dd92d55b10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "seen", "source": "https://t.me/cibsecurity/21864", "content": "\u203c CVE-2020-16012 \u203c\n\nSide-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-08T22:42:14.000000Z"}, {"uuid": "649c6a4c-038b-4867-9839-236b9d491e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2491", "content": "#Threat_Research\nLeaking Silhouettes of Cross-Origin Images\nhttps://blog.mozilla.org/attack-and-defense/2021/01/11/leaking-silhouettes-of-cross-origin-images\n]-> PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox/Chrome\nhttps://github.com/aleksejspopovs/cve-2020-16012", "creation_timestamp": "2021-01-14T11:04:01.000000Z"}, {"uuid": "d38a826f-bf24-4a67-b530-03f27dc77d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-29T23:00:05.518323Z"}, {"uuid": "83f500a8-521a-4a81-9462-cca86f92ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "published-proof-of-concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-30T00:00:07.284400Z"}, {"uuid": "399db233-b3fb-4350-acfb-69f452363e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "seen", "source": "https://t.me/cissp/2079", "content": "1. Adventures in Reversing Malicious Run-Only AppleScripts\nhttps://labs.sentinelone.com/fade-dead-adventures-in-reversing-malicious-run-only-applescripts\n\n2. SUNSPOT Malware: An Implant in the Build Process\nhttps://www.crowdstrike.com/blog/sunspot-malware-technical-analysis\n\n1. Pentesting the ELK (Elasticsearch, Logstash, Kibana) Stack\nhttps://insinuator.net/2021/01/\npentesting-the-elk-stack\n\n2. Hiding execution of unsigned code in system threads\nhttps://secret.club/2021/01/12/callout.html\n]-> callout-poc:\nhttps://github.com/thesecretclub/callout-poc\n\nStrengthening Security Configurations to Defend Against Attackers Targeting Cloud Services\nhttps://us-cert.cisa.gov/ncas/analysis-reports/ar21-013a\n\n1. Breaking Google Chrome browser running on Windows (PoC)\nhttps://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors\n\n2. Flutter based Mac OSX Thick Client SSL Pinning Bypass\nhttps://notsosecure.com/flutter-based-mac-osx-thick-client-ssl-pinning-bypass\n\nLeaking Silhouettes of Cross-Origin Images\nhttps://blog.mozilla.org/attack-and-defense/2021/01/11/leaking-silhouettes-of-cross-origin-images\n]-> PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox/Chrome\nhttps://github.com/aleksejspopovs/cve-2020-16012\n\nCreate module for CVE-2020-17136:\nCloud Filter Arbitrary File Creation EoP (PoC)\n// LPE on Windows 10 1803 and later\nhttps://github.com/rapid7/metasploit-framework/pull/14585", "creation_timestamp": "2026-09-01T17:01:06.555455Z"}, {"uuid": "07175450-7734-4da0-9aa4-e3377b3d08a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "seen", "source": "https://t.me/cissp/2079", "content": "1. Adventures in Reversing Malicious Run-Only AppleScripts\nhttps://labs.sentinelone.com/fade-dead-adventures-in-reversing-malicious-run-only-applescripts\n\n2. SUNSPOT Malware: An Implant in the Build Process\nhttps://www.crowdstrike.com/blog/sunspot-malware-technical-analysis\n\n1. Pentesting the ELK (Elasticsearch, Logstash, Kibana) Stack\nhttps://insinuator.net/2021/01/\npentesting-the-elk-stack\n\n2. Hiding execution of unsigned code in system threads\nhttps://secret.club/2021/01/12/callout.html\n]-> callout-poc:\nhttps://github.com/thesecretclub/callout-poc\n\nStrengthening Security Configurations to Defend Against Attackers Targeting Cloud Services\nhttps://us-cert.cisa.gov/ncas/analysis-reports/ar21-013a\n\n1. Breaking Google Chrome browser running on Windows (PoC)\nhttps://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors\n\n2. Flutter based Mac OSX Thick Client SSL Pinning Bypass\nhttps://notsosecure.com/flutter-based-mac-osx-thick-client-ssl-pinning-bypass\n\nLeaking Silhouettes of Cross-Origin Images\nhttps://blog.mozilla.org/attack-and-defense/2021/01/11/leaking-silhouettes-of-cross-origin-images\n]-> PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox/Chrome\nhttps://github.com/aleksejspopovs/cve-2020-16012\n\nCreate module for CVE-2020-17136:\nCloud Filter Arbitrary File Creation EoP (PoC)\n// LPE on Windows 10 1803 and later\nhttps://github.com/rapid7/metasploit-framework/pull/14585", "creation_timestamp": "2026-09-02T01:04:56.519101Z"}, {"uuid": "298fae0f-30eb-42f3-86d5-3cc2a23207cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2079", "content": "1. Adventures in Reversing Malicious Run-Only AppleScripts\nhttps://labs.sentinelone.com/fade-dead-adventures-in-reversing-malicious-run-only-applescripts\n\n2. SUNSPOT Malware: An Implant in the Build Process\nhttps://www.crowdstrike.com/blog/sunspot-malware-technical-analysis\n\n1. Pentesting the ELK (Elasticsearch, Logstash, Kibana) Stack\nhttps://insinuator.net/2021/01/\npentesting-the-elk-stack\n\n2. Hiding execution of unsigned code in system threads\nhttps://secret.club/2021/01/12/callout.html\n]-> callout-poc:\nhttps://github.com/thesecretclub/callout-poc\n\nStrengthening Security Configurations to Defend Against Attackers Targeting Cloud Services\nhttps://us-cert.cisa.gov/ncas/analysis-reports/ar21-013a\n\n1. Breaking Google Chrome browser running on Windows (PoC)\nhttps://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors\n\n2. Flutter based Mac OSX Thick Client SSL Pinning Bypass\nhttps://notsosecure.com/flutter-based-mac-osx-thick-client-ssl-pinning-bypass\n\nLeaking Silhouettes of Cross-Origin Images\nhttps://blog.mozilla.org/attack-and-defense/2021/01/11/leaking-silhouettes-of-cross-origin-images\n]-> PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox/Chrome\nhttps://github.com/aleksejspopovs/cve-2020-16012\n\nCreate module for CVE-2020-17136:\nCloud Filter Arbitrary File Creation EoP (PoC)\n// LPE on Windows 10 1803 and later\nhttps://github.com/rapid7/metasploit-framework/pull/14585", "creation_timestamp": "2026-09-11T21:00:04.786309Z"}, {"uuid": "c7397d7f-51f0-4d5c-9b3f-826458c8c208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16012", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2079", "content": "1. Adventures in Reversing Malicious Run-Only AppleScripts\nhttps://labs.sentinelone.com/fade-dead-adventures-in-reversing-malicious-run-only-applescripts\n\n2. SUNSPOT Malware: An Implant in the Build Process\nhttps://www.crowdstrike.com/blog/sunspot-malware-technical-analysis\n\n1. Pentesting the ELK (Elasticsearch, Logstash, Kibana) Stack\nhttps://insinuator.net/2021/01/\npentesting-the-elk-stack\n\n2. Hiding execution of unsigned code in system threads\nhttps://secret.club/2021/01/12/callout.html\n]-> callout-poc:\nhttps://github.com/thesecretclub/callout-poc\n\nStrengthening Security Configurations to Defend Against Attackers Targeting Cloud Services\nhttps://us-cert.cisa.gov/ncas/analysis-reports/ar21-013a\n\n1. Breaking Google Chrome browser running on Windows (PoC)\nhttps://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors\n\n2. Flutter based Mac OSX Thick Client SSL Pinning Bypass\nhttps://notsosecure.com/flutter-based-mac-osx-thick-client-ssl-pinning-bypass\n\nLeaking Silhouettes of Cross-Origin Images\nhttps://blog.mozilla.org/attack-and-defense/2021/01/11/leaking-silhouettes-of-cross-origin-images\n]-> PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox/Chrome\nhttps://github.com/aleksejspopovs/cve-2020-16012\n\nCreate module for CVE-2020-17136:\nCloud Filter Arbitrary File Creation EoP (PoC)\n// LPE on Windows 10 1803 and later\nhttps://github.com/rapid7/metasploit-framework/pull/14585", "creation_timestamp": "2026-09-12T00:00:29.347687Z"}]}