PT-2020-3429

CVE-2020-6468

·

Published

2020-05-19

·

Updated

2025-09-29

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61
Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 83.0.4103.61, update to version 83.0.4103.61 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2025_16880
ALT-PU-2020-2034
ALT-PU-2020-2047
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
OPENSUSE-SU-2020:0823-1
OPENSUSE-SU-2020_0823-1
OPENSUSE-SU-2020:0832-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:2544
RHSA-2020_2544
Found an issue in the description? Have something to add? Feel free to write us 👾