PT-2020-3422

CVE-2020-6459

·

Published

2020-04-21

·

Updated

2024-06-15

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.122
Description The issue is related to a use after free in the payments mechanism of Google Chrome, which can be exploited by a remote attacker via a crafted HTML page. This could potentially allow the attacker to exploit heap corruption. The exploitation of this issue may enable the attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 81.0.4044.122, update to version 81.0.4044.122 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2020-1962
ALT-PU-2020-1969
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
MGASA-2020-0185
OPENSUSE-SU-2020:0604-1
OPENSUSE-SU-2020_0604-1
OPENSUSE-SU-2020:0615-1
OPENSUSE-SU-2020:0635-1
OPENSUSE-SU-2020_0635-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:1970
RHSA-2020_1970
Found an issue in the description? Have something to add? Feel free to write us 👾