CVE-2020-16005

Published: Nov 3, 2020Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected (8)

Products: Google: Chrome · Opensuse: Backports Sle, Leap · Debian: Debian Linux · +1 more

Show all products

Google: Chrome · Opensuse: Backports Sle, Leap · Debian: Debian Linux · Fedoraproject: Fedora

1 product

2 products

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 86.0.4240.183

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Backports Sle	Version 15.0 sp1
Opensuse Backports Sle	Version 15.0 sp2
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 32
Fedoraproject Fedora	Version 33

Related CWEs

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (16)

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html

Source: chrome-cve-admin@google.com

Release NotesVendor Advisory

https://crbug.com/1139398

Source: chrome-cve-admin@google.com

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S4XYJ7B6OXHZNYSA5J3DBUOFEC6WCAGW/

Source: chrome-cve-admin@google.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/

Source: chrome-cve-admin@google.com

https://security.gentoo.org/glsa/202011-12

Source: chrome-cve-admin@google.com

Third Party Advisory

https://www.debian.org/security/2021/dsa-4824

Source: chrome-cve-admin@google.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://crbug.com/1139398

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S4XYJ7B6OXHZNYSA5J3DBUOFEC6WCAGW/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202011-12

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2021/dsa-4824

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.