CVE-2020-16046

Опубликовано: 14 янв. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Ссылки

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
Release Notes
Vendor Advisory
https://crbug.com/1098606
Exploit
Vendor Advisory
https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
Release Notes
Vendor Advisory
https://crbug.com/1098606
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 84.0.4147.105 (исключая)

cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00794

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-16046

CVSS3: 6.1

debian

почти 6 лет назад

Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147. ...

GHSA-mw8p-fqvp-7r34

github

больше 4 лет назад

Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

ALT-PU-2020-2479

CVSS3: 8.8

altlinux

больше 6 лет назад

ALT-PU-2020-2479: package `chromium` update to version 84.0.4147.105-alt1

ALT-PU-2020-3144

CVSS3: 9.8