CVE-2020-15959

published 2020-09-21

CVE-2020-15959: Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain…

medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C L I N A N

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
chromium	chromium	>= 0 < 87.0.4280.88-0.1	87.0.4280.88-0.1
chromium	chromium	>= 0 < 87.0.4280.88-0.1	87.0.4280.88-0.1
chromium	chromium	>= 0 < 87.0.4280.88-0.1	87.0.4280.88-0.1
chromium	chromium	>= 0 < 87.0.4280.88-0.1	87.0.4280.88-0.1
debian	chromium	< chromium 87.0.4280.88-0.1 (bookworm)	chromium 87.0.4280.88-0.1 (bookworm)
debian	debian_linux	—	—
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
google	chrome	< 85.0.4183.102	85.0.4183.102
google	chrome	>= unspecified < 85.0.4183.102	85.0.4183.102
google	chrome_chrome	—	—
opensuse	backports_sle	—	—
opensuse	leap	—	—
opensuse	leap	—	—

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

osv 4.3 MEDIUM