PT-2020-6536 · Google+2 · Google Chrome+2

Publicado 2020-09-08 · Atualizado 2024-06-15 · CVE-2020-6574

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Versões do Google Chrome anteriores à 85.0.4183.102

Descrição

O problema está relacionado à aplicação insuficiente de políticas no instalador do Google Chrome no OS X, permitindo que um invasor local possa potencialmente obter escalonamento de privilégios por meio de um binário malicioso.

Recomendações

Para versões anteriores à 85.0.4183.102, atualize para a versão 85.0.4183.102 ou posterior para resolver o problema.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2021-06070

CVE-2020-6574

DSA-4824-1

OPENSUSE-SU-2020:1499-1

OPENSUSE-SU-2020:1510-1

OPENSUSE-SU-2020:1514-1

OPENSUSE-SU-2020:1713-1

OPENSUSE-SU-2020_1499-1

OPENSUSE-SU-2020_1713-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:3740

RHSA-2020_3740

Produtos afetados

Google Chrome

Red Hat

Suse

Referências · 2354

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_simplifiedlowering_overflow.rb · Exploit
• 🔥 https://github.com/PerimeterX/CVE-2020-6519 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://suse.com/security/cve/CVE-2022-0463 · Nota
• https://suse.com/security/cve/CVE-2021-30517 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2022-3071 · Nota
• https://suse.com/security/cve/CVE-2015-1216 · Nota
• https://suse.com/security/cve/CVE-2016-5131 · Nota
• https://suse.com/security/cve/CVE-2017-5075 · Nota