CVE-2020-6463

CVSS v3.1 8.8 (High)

CVSS v2.0 6.8 (Medium)

EPSS 0.58 % (78^th)

Affected Products 6

Advisories 40

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Weaknesses

CWE-416: Use After Free
CWE-787: Out-of-bounds Write

CVE Status: PUBLISHED
CNA: Chrome
Published Date: 2020-05-21 04:15:11
(4 years ago)
Updated Date: 2023-11-07 03:24:21
(10 months ago)

Affected Products

Canonical

Ubuntu Linux

Debian

Debian Linux

Fedoraproject

Fedora

Google

Chrome

Opensuse

Configuration #1

		CPE23	From	Up To
	Google Chrome prior 81.0.4044.122 version	cpe:2.3:a:google:chrome		< 81.0.4044.122

Configuration #2

		CPE23	From	Up To
	Fedoraproject Fedora 31	cpe:2.3:o:fedoraproject:fedora:31
	Fedoraproject Fedora 32	cpe:2.3:o:fedoraproject:fedora:32

Configuration #3

		CPE23	From	Up To
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04:::*:lts

Configuration #4

		CPE23	From	Up To
	Debian Linux 9.0	cpe:2.3:o:debian:debian_linux:9.0
	Debian Linux 10.0	cpe:2.3:o:debian:debian_linux:10.0

Configuration #5

		CPE23	From	Up To
	Opensuse Backports Sle 15.0 SP1	cpe:2.3:a:opensuse:backports_sle:15.0:sp1
	Opensuse Leap 15.1	cpe:2.3:o:opensuse:leap:15.1
	Opensuse Leap 15.2	cpe:2.3:o:opensuse:leap:15.2