PT-2020-3427

CVE-2020-6466

·

Published

2020-05-19

·

Updated

2024-06-15

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61
Description The issue is related to a use after free in the media component of Google Chrome, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service via a specially crafted HTML page. This can potentially allow the attacker to perform a sandbox escape if the renderer process is compromised.
Recommendations For versions prior to 83.0.4103.61, update to version 83.0.4103.61 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable media components until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2020-2034
ALT-PU-2020-2047
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
OPENSUSE-SU-2020:0823-1
OPENSUSE-SU-2020_0823-1
OPENSUSE-SU-2020:0832-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:2544
RHSA-2020_2544
Found an issue in the description? Have something to add? Feel free to write us 👾