PT-2020-3352

CVE-2020-6434

·

تاريخ النشر

2020-04-07

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 2.0
9.3
عالية
المقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.92
Description The issue is related to a use after free vulnerability in the devtools component of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially allow the attacker to access confidential data, compromise data integrity, and cause a denial of service. The vulnerability is associated with heap corruption.
Recommendations For Google Chrome versions prior to 81.0.4044.92, update to version 81.0.4044.92 or later to resolve the issue. As a temporary workaround, consider restricting access to devtools or avoiding the use of potentially vulnerable features until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2020-1706
ALT-PU-2020-1765
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
MGASA-2020-0174
OPENSUSE-SU-2020:0519-1
OPENSUSE-SU-2020_0519-1
OPENSUSE-SU-2020:0540-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:1487
RHSA-2020_1487
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾