vendor:
Google Chrome
by:
r4j0x00
8.8
CVSS
HIGH
Remote Code Execution
119
CWE
Product Name: Google Chrome
Affected Version From: 81.0.4044
Affected Version To: 83.0.4103.106
Patch Exists: YES
Related CWE: CVE-2020-6507
CPE: a:google:chrome
Metasploit:
https://www.rapid7.com/db/vulnerabilities/microsoft-edge-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/alpine-linux-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/google-chrome-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/debian-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/redhat_linux-cve-2020-6507/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2020-6507/
Platforms Tested: Windows, Linux, Mac
2020
Google Chrome 81.0.4044 V8 – Remote Code Execution
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Mitigation:
Update Google Chrome to version 83.0.4103.106 or later.
