Multiple vulnerabilities in Google Chrome

Description

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in reader mode can be exploited to potentially cause denial of service.
2. Policy enforcement vulnerability in developer tools can be exploited to bypass same origin policy.
3. Implementation vulnerability in full screen component can be exploited to potentially execute arbitrary code.
4. Data validation vulnerability in ChromeDriver can be exploited to bypass security restrictions.
5. Policy enforcement vulnerability in payments component can be exploited to bypass same origin policy.
6. Use after free vulnerability in WebRTC can be exploited to potentially cause denial of service.
7. Type confusion vulnerability in V8 can be exploited to potentially cause denial of service.
8. Implementation vulnerability in developer tools can be exploited ti potentially execute arbitrary code.
9. Policy enforcement vulnerability in Blink can be exploited to bypass same origin policy.
10. Data validation vulnerability in clipboard component can be exploited to obtaion sensitive information.
11. Data validation vulnerability in loader component can be exploited to bypass security restrictions.
12. Policy enforcement vulnerability in enterprice component can be exploited to bypass same origin policy.
13. Implementation vulnerability in installer component can be exploited to potentially execute arbitrary code.
14. Implementation vulnerability in sharing component can be exploited to potentially execute arbitrary code.
15. Policy enforcement vulnerability in downloads component can be exploited to bypass same origin policy.
16. Security UI vulnerability in full screen component can be exploited to perform domain spoofing.
17. Security UI vulnerability in site information component can be exploited to perform domain spoofing.
18. Policy enforcement vulnerability in navigations component can be exploited to bypass same origin policy.
19. Use after free vulnerability in Blink can be exploited ti potentially cause denial of service.
20. Data validation vulnerability in media router can be exploited to bypass security restrictions.
21. Policy enforcement vulnerability in URL formatting component can be exploited to bypass same origin policy.
22. Use after free vulnerability in media component can be exploited to potentially cause denial of service.
23. Policy enforcement vulnerability in tab strip component can be exploited to bypass same origin policy.

Original advisories

• Stable Channel Update for Desktop

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Google-Chrome

CVE list

• CVE-2020-6465
  critical
• CVE-2020-6471
  critical
• CVE-2020-6478
  high
• CVE-2020-6484
  high
• CVE-2020-6483
  high
• CVE-2020-6467
  critical
• CVE-2020-6468
  critical
• CVE-2020-6489
  warning
• CVE-2020-6473
  high
• CVE-2020-6470
  high
• CVE-2020-6490
  warning
• CVE-2020-6469
  critical
• CVE-2020-6480
  high
• CVE-2020-6477
  critical
• CVE-2020-6479
  high
• CVE-2020-6487
  high
• CVE-2020-6475
  high
• CVE-2020-6491
  high
• CVE-2020-6486
  high
• CVE-2020-6474
  critical
• CVE-2020-6485
  high
• CVE-2020-6481
  high
• CVE-2020-6466
  critical
• CVE-2020-6488
  warning
• CVE-2020-6476
  high
• CVE-2020-6482
  high
• CVE-2020-6472
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com