PT-2020-2295 · Google+3 · Google Chrome+3

Woojin Oh · Published 2020-05-21 · Updated 2024-06-15 · CVE-2020-6465

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61

Description The issue is related to a use after free in reader mode, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This can be achieved via a crafted HTML page.

Recommendations For versions prior to 83.0.4103.61, update to version 83.0.4103.61 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2020-2034

ALT-PU-2020-2047

ALT-PU-2020-2420

ALT-PU-2020-2441

BDU:2020-02263

CVE-2020-6465

DSA-4714-1

DSA-4714-2

DSA-4714-3

OPENSUSE-SU-2020:0823-1

OPENSUSE-SU-2020:0832-1

OPENSUSE-SU-2020_0823-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:2544

RHSA-2020_2544

Affected Products

Alt Linux

Google Chrome

Red Hat

Suse

References · 2348

• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20200722SE16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6465 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-6465 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0832-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/651108 · Security Note
• https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-6465 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4714-3 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4714-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4714-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT · Vendor Advisory