PT-2020-6536 · Google+2 · Google Chrome+2

Published 2020-09-08 · Updated 2024-06-15 · CVE-2020-6574

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 85.0.4183.102

Description The issue is related to insufficient policy enforcement in the installer of Google Chrome on OS X, allowing a local attacker to potentially achieve privilege escalation via a crafted binary.

Recommendations For versions prior to 85.0.4183.102, update to version 85.0.4183.102 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2021-06070

CVE-2020-6574

DSA-4824-1

OPENSUSE-SU-2020:1499-1

OPENSUSE-SU-2020:1510-1

OPENSUSE-SU-2020:1514-1

OPENSUSE-SU-2020:1713-1

OPENSUSE-SU-2020_1499-1

OPENSUSE-SU-2020_1713-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:3740

RHSA-2020_3740

Affected Products

Google Chrome

Red Hat

Suse

References · 2354

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_simplifiedlowering_overflow.rb · Exploit
• 🔥 https://github.com/PerimeterX/CVE-2020-6519 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD · Vendor Advisory
• https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-6574 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4824-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1499-1 · Vendor Advisory