Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-15970

Опубликовано: 03 нояб. 2020
Источник: debian
EPSS Низкий

Описание

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed87.0.4280.88-0.1package
chromiumend-of-lifestretchpackage

EPSS

Процентиль: 80%
0.01427
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 5 лет назад

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS3: 8.8
redhat
больше 5 лет назад

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS3: 8.8
nvd
больше 5 лет назад

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

github
больше 3 лет назад

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS3: 8.8
fstec
больше 5 лет назад

Уязвимость компонента NFC браузера Google Chrome , связанная с использованием памяти после её освобождения, позволяющая нарушителю выйти из изолированной программной среды

EPSS

Процентиль: 80%
0.01427
Низкий