PT-2020-6197 · Mozilla+7 · Firefox+9
Aleksejs Popovs
·
Published
2020-05-30
·
Updated
2025-09-29
·
CVE-2020-16012
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 87.0.4280.66
Firefox (affected versions not specified)
Firefox ESR (affected versions not specified)
Thunderbird (affected versions not specified)
Description
The issue is related to a data source confirmation error, allowing a remote attacker to access confidential data. It involves side-channel information leakage in graphics, enabling the attacker to leak cross-origin data via a crafted HTML page.
Recommendations
For Google Chrome versions prior to 87.0.4280.66, update to version 87.0.4280.66 or later.
For Firefox, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Firefox ESR, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Thunderbird, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Firefox
Firefox Esr
Google Chrome
Linuxmint
Red Hat
Suse
Thunderbird
Ubuntu