PT-2019-4861 · Google+3 · Google Chrome+3
Sergei Glazunov
·
Publicado
2019-11-29
·
Atualizado
2024-06-15
·
CVE-2020-6380
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 79.0.3945.130
Description
The issue is related to insufficient policy enforcement in extensions, which may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. It is also associated with incorrect input validation in extensions, enabling an attacker to bypass existing security restrictions.
Recommendations
For versions prior to 79.0.3945.130, update to version 79.0.3945.130 or later to resolve the issue. As a temporary workaround, consider restricting the use of extensions to minimize the risk of exploitation.
Correção
Incorrect Authorization
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse