PT-2020-3424

CVE-2020-6461

·

Published

2020-04-27

·

Updated

2022-10-05

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.129
Description The issue is related to a use after free in storage, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This can be achieved via a crafted HTML page. The exploitation of this issue may allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 81.0.4044.129, update to version 81.0.4044.129 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2020-1962
ALT-PU-2020-1969
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
MGASA-2020-0198
OPENSUSE-SU-2020:0635-1
OPENSUSE-SU-2020_0635-1
RHSA-2020:1981
RHSA-2020_1981
Found an issue in the description? Have something to add? Feel free to write us 👾