PT-2020-6528 · Google+3 · Google Chrome+3

Publicado 2020-10-13 · Atualizado 2024-06-15 · CVE-2020-15983

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Versões do Google Chrome anteriores à 86.0.4240.75

Descrição

O problema está relacionado à validação insuficiente de dados na interface web do Google Chrome no ChromeOS, permitindo que um invasor local contorne a política de segurança de conteúdo. Isso pode ser feito por meio de uma página HTML especialmente criada.

Recomendações

Para versões anteriores à 86.0.4240.75, atualize para a versão 86.0.4240.75 ou posterior para resolver o problema.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2020-3035

ALT-PU-2020-3144

ALT-PU-2021-1157

ALT-PU-2021-1210

ALT-PU-2021-1379

BDU:2021-06061

CVE-2020-15983

DSA-4824-1

OPENSUSE-SU-2020:1705-1

OPENSUSE-SU-2020:1715-1

OPENSUSE-SU-2020:1829-1

OPENSUSE-SU-2020_1705-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:4235

RHSA-2020_4235

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Suse

Referências · 2347

• https://suse.com/security/cve/CVE-2022-0463 · Nota
• https://suse.com/security/cve/CVE-2021-30517 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2022-3071 · Nota
• https://suse.com/security/cve/CVE-2015-1216 · Nota
• https://suse.com/security/cve/CVE-2016-5131 · Nota
• https://suse.com/security/cve/CVE-2017-5075 · Nota
• https://suse.com/security/cve/CVE-2021-4101 · Nota
• https://suse.com/security/cve/CVE-2021-21225 · Nota
• https://suse.com/security/cve/CVE-2022-1314 · Nota
• https://suse.com/security/cve/CVE-2012-5148 · Nota
• https://suse.com/security/cve/CVE-2021-21113 · Nota
• https://suse.com/security/cve/CVE-2023-1819 · Nota
• https://suse.com/security/cve/CVE-2019-13702 · Nota
• https://suse.com/security/cve/CVE-2021-21208 · Nota