Lucene search

CVE-2020-15972

🗓️ 03 Nov 2020 03:13:15Reported by ChromeType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 190 Views

CVE-2020-15972 Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 48
Cvelist	CVE-2020-15972	3 Nov 202000:00	–	cvelist
Prion	Design/Logic Flaw	3 Nov 202003:15	–	prion
Veracode	Use After Free	21 Dec 202020:38	–	veracode
UbuntuCve	CVE-2020-15972	3 Nov 202000:00	–	ubuntucve
NVD	CVE-2020-15972	3 Nov 202003:15	–	nvd
RedhatCVE	CVE-2020-15972	7 Oct 202009:35	–	redhatcve
Debian CVE	CVE-2020-15972	3 Nov 202003:15	–	debiancve
Github Security Blog	One day short of a full chain: Real world exploit chains explained	24 Mar 202122:28	–	github
ThreatPost	Google’s Chrome 86: Critical Payments Bug, Password Checker Among Security Notables	7 Oct 202015:50	–	threatpost
Tenable Nessus	Microsoft Edge (Chromium) < 86.0.622.38 Multiple Vulnerabilities	9 Oct 202000:00	–	nessus

Nvd

Vulners

Node

google chromeRange<86.0.4240.75

Node

debian debian_linuxMatch10.0

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

opensuse backports_sleMatch15.0sp2

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "86.0.4240.75",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202101-30
crbug	www.crbug.com/1115901
debian	www.debian.org/security/2021/dsa-4824
lists	www.lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS/
chromereleases	www.chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
packetstormsecurity	www.packetstormsecurity.com/files/172842/Chrome-Renderer-Remote-Code-Execution.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Nov 2020 03:15Current

8.2High risk

Vulners AI Score8.2

CVSS26.8

CVSS38.8

EPSS0.03497