CVE-2020-15961

CVE-2020-15961: falha em Google Chrome

Publicada em 21 set 2020 · Atualizada em 04 ago 2024

Seguir esta CVE + Monitorar Chrome + Monitorar chromium

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.5%

Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

Produtos afetados

Google · Chrome

CVEs relacionadas — Google Chrome

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4863HIGHCVE-2023-4863EPSS 100.0%KEV CVE-2018-17463HIGHCVE-2018-17463EPSS 84.6%KEV CVE-2021-21224HIGHCVE-2021-21224EPSS 84.2%KEV CVE-2020-6418HIGHCVE-2020-6418EPSS 78.8%KEV CVE-2022-2294HIGHCVE-2022-2294EPSS 70.8%KEV CVE-2021-21220HIGHCVE-2021-21220EPSS 70.4%KEV

Referências

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html https://crbug.com/1114636 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/https://security.gentoo.org/glsa/202009-13 https://security.gentoo.org/glsa/202101-30 https://www.debian.org/security/2021/dsa-4824