CVE-2020-16035

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 87.0.4280.66

Description The issue is related to insufficient data validation in the cros-disks component of Google Chrome on ChromeOS. This allows a remote attacker who has compromised the browser process to bypass noexec restrictions by using a malicious file. The attacker could potentially gain unauthorized access to protected information.

Recommendations For versions prior to 87.0.4280.66, update to version 87.0.4280.66 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious files to minimize the risk of exploitation.