PT-2020-3425 · Google+3 · Google Chrome+3

Zhe Jin · Published 2020-04-27 · Updated 2024-06-15 · CVE-2020-6462

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.129

Description The issue is related to a use after free in task scheduling, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This could lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.

Recommendations For Google Chrome versions prior to 81.0.4044.129, update to version 81.0.4044.129 or later to resolve the issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2020-1962

ALT-PU-2020-1969

ALT-PU-2020-2420

ALT-PU-2020-2441

BDU:2020-03748

CVE-2020-6462

DSA-4714-1

DSA-4714-2

DSA-4714-3

MGASA-2020-0198

OPENSUSE-SU-2020:0604-1

OPENSUSE-SU-2020:0615-1

OPENSUSE-SU-2020:0635-1

OPENSUSE-SU-2020_0604-1

OPENSUSE-SU-2020_0635-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:1981

RHSA-2020_1981

Affected Products

Alt Linux

Google Chrome

Red Hat

Suse

References · 2355

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_jscreate_sideeffect.rb · Exploit
• 🔥 https://github.com/ChoKyuWon/CVE-2020-6418 · Exploit
• 🔥 https://github.com/ChoKyuWon/CVE-2019-13720 · Exploit
• 🔥 https://github.com/Goyotan/CVE-2020-6468-PoC · Exploit
• 🔥 https://github.com/HaboobLab/CVE-2019-13764 · Exploit
• 🔥 https://github.com/cve-2019-13720/cve-2019-13720 · Exploit
• 🔥 https://github.com/Goyotan/CVE-2020-6418-PoC · Exploit
• 🔥❌ https://github.com/ray-cp/browser_pwn/tree/master/cve-2020-6418 · Exploit, Deleted
• https://security.gentoo.org/glsa/202005-13 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20200722SE16 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-6462 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/650220 · Security Note
• https://advisories.mageia.org/MGASA-2020-0198.html · Security Note
• https://osv.dev/vulnerability/MGASA-2020-0198 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-6462 · Vendor Advisory