PT-2020-5793
CVE-2020-6575
·
Published
2020-09-08
·
Updated
2024-06-15
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 85.0.4183.102
Description:
The issue is related to a race condition in the Mojo messaging library of Google Chrome, which can be exploited by a remote attacker who has compromised the renderer process. This could potentially allow the attacker to escape the sandbox via a crafted HTML page, gaining access to confidential data, disrupting its integrity, and causing a denial of service.
Recommendations:
For Google Chrome versions prior to 85.0.4183.102, update to version 85.0.4183.102 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾