KLA12009
Multiple vulnerabilities in Google Chrome

Обновлено: 16/02/2021
Дата обнаружения
17/11/2020
Уровень угрозы
Warning
Описание

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Adobe Flash can be exploited to obtain sensitive information.
  2. A use after free vulnerability in WebCodecs can be exploited to execute arbitrary code or cause denial of service.
  3. An implementation vulnerability in cookies can be exploited to cause denial of service.
  4. A side-channel information leakage vulnerability in graphics component can be exploited to obtain sensitive information.
  5. A policy enforcement vulnerability in developer tools can be exploited to bypass security restrictions.
  6. An implementation vulnerability in filesystem component can be exploited to cause denial of service.
  7. A heap buffer overflow vulnerability in WebRTC can be exploited to cause denial of service.
  8. A use after free vulnerability in WebRTC can be exploited to execute arbitrary code or cause denial of service.
  9. An implementation vulnerability in WebRTC can be exploited to cause denial of service.
  10. A security UI vulnerability in tab preview component can be exploited to spoof user interface.
  11. A security UI vulnerability in WebUSB can be exploited to spoof user interface.
  12. A race condition vulnerability in ImageBurner can be exploited to cause denial of service.
  13. A use after free vulnerability in PPAPI can be exploited to execute arbitrary code or cause denial of service.
  14. A data validation vulnerability in cros-disks can be exploited to cause denial of service or bypass security restrictions.
  15. A data validation vulnerability in Blink can be exploited to cause denial of service or obtain sensitive information.
  16. An implementation vulnerability in cryptohome component can be exploited to cause denial of service.
  17. A data validation vulnerability in WASM can be exploited to cause denial of service or bypass security restrictions.
  18. A heap buffer overflow vulnerability in UI can be exploited to cause denial of service or spoof user interface.
  19. An implementation vulnerability in PDFium can be exploited to cause denial of service.
  20. A use after free vulnerability in payments component can be exploited to execute arbitrary code or cause denial of service.
  21. A heap buffer overflow vulnerability in clipboard can be exploited to cause denial of service.
  22. A security UI vulnerability in sharing component can be exploited to spoof user interface.
  23. A policy enforcement vulnerability in networking component can be exploited to bypass security restrictions.
  24.  
Пораженные продукты

Google Chrome earlier than 87.0.4280.66

Решение

Update to the latest version
Download Google Chrome

Первичный источник обнаружения
Stable Channel Update for Desktop
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

SUI 
[?]
Связанные продукты
Google Chrome
CVE-IDS