CVE-2020-16038

Опубликовано: 08 янв. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Низкий

Описание

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Ссылки

https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
Release Notes
Vendor Advisory
https://crbug.com/1138683
Permissions Required
Vendor Advisory
https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
Release Notes
Vendor Advisory
https://crbug.com/1138683
Permissions Required
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 87.0.4280.88 (исключая)

cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00457

Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2020-16038

CVSS3: 8.8

ubuntu

около 5 лет назад

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-16038

CVSS3: 8.8

debian

около 5 лет назад

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 ...

GHSA-j6j9-67jq-2hgx

github

больше 3 лет назад

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

BDU:2021-01675

CVSS3: 8.8

fstec

больше 5 лет назад

Уязвимость функции MediaStreamCaptureIndicator::WebContentsDeviceUsage::AddDevices() браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании

openSUSE-SU-2020:2360-1

suse-cvrf

около 5 лет назад

Security update for opera

EPSS

Процентиль: 63%

0.00457

Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-416