KLA12009
Multiple vulnerabilities in Google Chrome

Updated: 02/16/2021
Detect date
?
11/17/2020
Severity
?
Warning
Description

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Adobe Flash can be exploited to obtain sensitive information.
  2. A use after free vulnerability in WebCodecs can be exploited to execute arbitrary code or cause denial of service.
  3. An implementation vulnerability in cookies can be exploited to cause denial of service.
  4. A side-channel information leakage vulnerability in graphics component can be exploited to obtain sensitive information.
  5. A policy enforcement vulnerability in developer tools can be exploited to bypass security restrictions.
  6. An implementation vulnerability in filesystem component can be exploited to cause denial of service.
  7. A heap buffer overflow vulnerability in WebRTC can be exploited to cause denial of service.
  8. A use after free vulnerability in WebRTC can be exploited to execute arbitrary code or cause denial of service.
  9. An implementation vulnerability in WebRTC can be exploited to cause denial of service.
  10. A security UI vulnerability in tab preview component can be exploited to spoof user interface.
  11. A security UI vulnerability in WebUSB can be exploited to spoof user interface.
  12. A race condition vulnerability in ImageBurner can be exploited to cause denial of service.
  13. A use after free vulnerability in PPAPI can be exploited to execute arbitrary code or cause denial of service.
  14. A data validation vulnerability in cros-disks can be exploited to cause denial of service or bypass security restrictions.
  15. A data validation vulnerability in Blink can be exploited to cause denial of service or obtain sensitive information.
  16. An implementation vulnerability in cryptohome component can be exploited to cause denial of service.
  17. A data validation vulnerability in WASM can be exploited to cause denial of service or bypass security restrictions.
  18. A heap buffer overflow vulnerability in UI can be exploited to cause denial of service or spoof user interface.
  19. An implementation vulnerability in PDFium can be exploited to cause denial of service.
  20. A use after free vulnerability in payments component can be exploited to execute arbitrary code or cause denial of service.
  21. A heap buffer overflow vulnerability in clipboard can be exploited to cause denial of service.
  22. A security UI vulnerability in sharing component can be exploited to spoof user interface.
  23. A policy enforcement vulnerability in networking component can be exploited to bypass security restrictions.
  24.  
Affected products

Google Chrome earlier than 87.0.4280.66

Solution

Update to the latest version
Download Google Chrome

Original advisories

Stable Channel Update for Desktop

Impacts
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

SUI 
[?]
Related products
Google Chrome
CVE-IDS
?
Find out the statistics of the vulnerabilities spreading in your region