CVE-2020-15959

Summary

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.

Affected Software

Weaknesses

• Insufficient policy enforcement

ADP Enrichment

CVE Program Container

Additional References

• https://crbug.com/1122684
• https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html
• https://www.debian.org/security/2021/dsa-4824
• https://security.gentoo.org/glsa/202101-30

References

• https://crbug.com/1122684
• https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html
• https://www.debian.org/security/2021/dsa-4824
• https://security.gentoo.org/glsa/202101-30

• ←Previous
• Next→