Vulnerability CVE-2020-6559: Information

Description

Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Published: Sept. 21, 2020
Modified: Nov. 7, 2023
Error type identifier: CWE-787CWE-416

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
  • Vendor Advisory
https://crbug.com/1116706
  • Third Party Advisory
openSUSE-SU-2020:1499
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2020:1510
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2020:1514
  • Mailing List
  • Third Party Advisory
DSA-4824
  • Third Party Advisory
GLSA-202101-30
  • Third Party Advisory
FEDORA-2020-6da740d38c
      1. Configuration 1

        cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
        End excliding
        85.0.4183.83

        Configuration 2

        cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

        cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

        cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*

        cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

        cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*

        cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*