CVE-2020-6377

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html · Mailing List
• access.redhat.com/errata/RHSA-2020:0084 · Third Party Advisory
• chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop.html · Vendor Advisory
• crbug.com/1029462 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSUXNEUS6N42UJNQVCQSTSM6CSW2REPG
• seclists.org/bugtraq/2020/Jan/27 · Mailing List
• security.gentoo.org/glsa/202003-08

chrome のその他の脆弱性

• CVE-2026-76031高 8.8Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to bypass w…
• CVE-2026-76030高 8.8Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to pot…
• CVE-2026-76029高 8.8Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the …
• CVE-2026-76028高 8.8Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to exe…
• CVE-2026-76027中 4.3Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted…