PT-2020-3425

CVE-2020-6462

·

Published

2020-04-27

·

Updated

2024-06-15

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.129
Description The issue is related to a use after free in task scheduling, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This could lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.
Recommendations For Google Chrome versions prior to 81.0.4044.129, update to version 81.0.4044.129 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2020-1962
ALT-PU-2020-1969
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
MGASA-2020-0198
OPENSUSE-SU-2020:0604-1
OPENSUSE-SU-2020_0604-1
OPENSUSE-SU-2020:0615-1
OPENSUSE-SU-2020:0635-1
OPENSUSE-SU-2020_0635-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:1981
RHSA-2020_1981
Found an issue in the description? Have something to add? Feel free to write us 👾