CVE-2020-15959

MITTEL 4.3CVE-2020-15959 · Published 21/09/2020 · updated 17/06/2026

Kurz gesagt

CVE-2020-15959 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in chrome (google), backports sle (opensuse).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 69.2% aller Schwachstellen.
Abhilfe: auf 85.0.4183.102 oder neuer aktualisieren.

Package	Affected versions	Patched versions
chrome google	`< 85.0.4183.102`	`85.0.4183.102`
backports sle opensuse	`= 15.0`	No fix yet

Description

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.

References

lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html · Mailing List
chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html · Release Notes
crbug.com/1122684 · Permissions Required
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD
security.gentoo.org/glsa/202101-30 · Third Party Advisory

Weitere Schwachstellen in chrome

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free