Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2020-15992

UNKNOWN
Published 2020-11-03T02:21:38
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2020-15992. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Google

Chrome

Affected Versions:

unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-ggrc-4c2q-3q6r

Advisory Details

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

CVSS Scoring

CVSS Score

7.5

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-15992
WEB https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
WEB https://crbug.com/1110195
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M
WEB https://security.gentoo.org/glsa/202101-30
WEB https://www.debian.org/security/2021/dsa-4824
WEB http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
https://crbug.com/1110195
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/
https://www.debian.org/security/2021/dsa-4824
https://security.gentoo.org/glsa/202101-30
Published: 2020-11-03T02:21:38
Last Modified: 2024-08-04T13:30:23.484Z
Copied to clipboard!