CVE-2020-6381
Severity
8.8HIGH
EPSS
2.9%
top 13.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 11
Latest updateMay 24
Description
Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages7 packages
Also affects: Debian Linux 10.0, 9.0, Fedora 30, 31
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-hjqw-r6v2-ghff: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80↗2022-05-24
CVEList▶
CVE-2020-6381: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80↗2020-02-11
OSV▶
CVE-2020-6381: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80↗2020-02-11
📋Vendor Advisories
3💬Community
3Bugzilla▶
CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389 CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394 CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-↗2020-02-11
Bugzilla▶
CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389 CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394 CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-↗2020-02-11