PT-2020-3425
CVE-2020-6462
·
Published
2020-04-27
·
Updated
2024-06-15
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 81.0.4044.129
Description
The issue is related to a use after free in task scheduling, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This could lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.
Recommendations
For Google Chrome versions prior to 81.0.4044.129, update to version 81.0.4044.129 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾