PT-2020-3424

CVE-2020-6461

·

تاريخ النشر

2020-04-27

·

تاريخ التحديث

2022-10-05

الوصف من

CVSS 3.1
9.6
حرجة
المقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.129
Description The issue is related to a use after free in storage, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This can be achieved via a crafted HTML page. The exploitation of this issue may allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 81.0.4044.129, update to version 81.0.4044.129 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2020-1962
ALT-PU-2020-1969
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
MGASA-2020-0198
OPENSUSE-SU-2020:0635-1
OPENSUSE-SU-2020_0635-1
RHSA-2020:1981
RHSA-2020_1981
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾