CVE-2020-15973
CVE-2020-15973
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.
CVSS 6.5 · Mittel · EPSS 1,0% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
chrome
- Softwareversionen
- ≥ unspecified, < 86.0.4240.75: Betroffen (custom)
Auf 86.0.4240.75 aktualisieren
chromium Debian:12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 87.0.4280.88-0.1
Auf 87.0.4280.88-0.1 aktualisieren
chromium Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 87.0.4280.88-0.1
Auf 87.0.4280.88-0.1 aktualisieren
chromium Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 87.0.4280.88-0.1
Auf 87.0.4280.88-0.1 aktualisieren
chromium-browser Ubuntu:16.04:LTS
- Softwareversionen
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- 48.0.2564.82-0ubuntu1.1222
- 48.0.2564.116-0ubuntu1.1229
- 49.0.2623.87-0ubuntu1.1232
- 49.0.2623.108-0ubuntu1.1233
- 50.0.2661.102-0ubuntu0.16.04.1.1237
- 51.0.2704.79-0ubuntu0.16.04.1.1242
- 52.0.2743.116-0ubuntu0.16.04.1.1250
- 53.0.2785.143-0ubuntu0.16.04.1.1254
- 53.0.2785.143-0ubuntu0.16.04.1.1257
- 55.0.2883.87-0ubuntu0.16.04.1263
- 56.0.2924.76-0ubuntu0.16.04.1268
- 57.0.2987.98-0ubuntu0.16.04.1276
- 58.0.3029.81-0ubuntu0.16.04.1277
- 58.0.3029.96-0ubuntu0.16.04.1279
- 58.0.3029.110-0ubuntu0.16.04.1281
- 59.0.3071.109-0ubuntu0.16.04.1289
- 59.0.3071.109-0ubuntu0.16.04.1291
- 60.0.3112.78-0ubuntu0.16.04.1293
- 60.0.3112.113-0ubuntu0.16.04.1298
- 61.0.3163.79-0ubuntu0.16.04.1300
- 61.0.3163.100-0ubuntu0.16.04.1306
- 62.0.3202.62-0ubuntu0.16.04.1308
- 62.0.3202.75-0ubuntu0.16.04.1313
- 62.0.3202.89-0ubuntu0.16.04.1315
- 62.0.3202.94-0ubuntu0.16.04.1317
- 63.0.3239.84-0ubuntu0.16.04.1
- 63.0.3239.132-0ubuntu0.16.04.1
- 64.0.3282.119-0ubuntu0.16.04.1
- 64.0.3282.140-0ubuntu0.16.04.1
- 64.0.3282.167-0ubuntu0.16.04.1
- 65.0.3325.181-0ubuntu0.16.04.1
- 66.0.3359.139-0ubuntu0.16.04.3
- 66.0.3359.181-0ubuntu0.16.04.1
- 67.0.3396.99-0ubuntu0.16.04.2
- 68.0.3440.75-0ubuntu0.16.04.1
- 68.0.3440.106-0ubuntu0.16.04.1
- 69.0.3497.81-0ubuntu0.16.04.1
- 70.0.3538.67-0ubuntu0.16.04.1
- 70.0.3538.77-0ubuntu0.16.04.1
- 70.0.3538.110-0ubuntu0.16.04.1
- 71.0.3578.80-0ubuntu0.16.04.1
- 71.0.3578.98-0ubuntu0.16.04.1
- 72.0.3626.119-0ubuntu0.16.04.1
- 72.0.3626.121-0ubuntu0.16.04.1
- 73.0.3683.75-0ubuntu0.16.04.1
- 73.0.3683.86-0ubuntu0.16.04.1
- 74.0.3729.169-0ubuntu0.16.04.1
- 76.0.3809.87-0ubuntu0.16.04.1
- 76.0.3809.100-0ubuntu0.16.04.1
- 77.0.3865.90-0ubuntu0.16.04.1
- 78.0.3904.70-0ubuntu0.16.04.2
- 78.0.3904.97-0ubuntu0.16.04.1
- 78.0.3904.108-0ubuntu0.16.04.1
- 79.0.3945.79-0ubuntu0.16.04.1
- 79.0.3945.130-0ubuntu0.16.04.1
- 80.0.3987.87-0ubuntu0.16.04.1
- 80.0.3987.149-0ubuntu0.16.04.1
- 80.0.3987.163-0ubuntu0.16.04.1
- 81.0.4044.122-0ubuntu0.16.04.1
- 81.0.4044.138-0ubuntu0.16.04.1
- 84.0.4147.105-0ubuntu0.16.04.1
- 85.0.4183.83-0ubuntu0.16.04.2
- 85.0.4183.121-0ubuntu0.16.04.1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 86.0.4240.75-0ubuntu0.16.04.1
Auf 86.0.4240.75-0ubuntu0.16.04.1 aktualisieren
chromium-browser Ubuntu:18.04:LTS
- Softwareversionen
- 61.0.3163.100-0ubuntu1.1378
- 62.0.3202.62-0ubuntu0.17.10.1380
- 62.0.3202.89-0ubuntu1.1386
- 62.0.3202.94-0ubuntu1.1388
- 63.0.3239.84-0ubuntu1
- 63.0.3239.108-0ubuntu1
- 64.0.3282.119-0ubuntu1
- 64.0.3282.140-0ubuntu1
- 64.0.3282.167-0ubuntu1
- 65.0.3325.146-0ubuntu1
- 65.0.3325.181-0ubuntu1
- 66.0.3359.139-0ubuntu0.18.04.3
- 66.0.3359.181-0ubuntu0.18.04.1
- 67.0.3396.99-0ubuntu0.18.04.1
- 68.0.3440.75-0ubuntu0.18.04.1
- 68.0.3440.106-0ubuntu0.18.04.1
- 69.0.3497.81-0ubuntu0.18.04.1
- 70.0.3538.67-0ubuntu0.18.04.1
- 70.0.3538.77-0ubuntu0.18.04.1
- 70.0.3538.110-0ubuntu0.18.04.1
- 71.0.3578.80-0ubuntu0.18.04.1
- 71.0.3578.98-0ubuntu0.18.04.1
- 72.0.3626.119-0ubuntu0.18.04.1
- 72.0.3626.121-0ubuntu0.18.04.1
- 73.0.3683.75-0ubuntu0.18.04.1
- 73.0.3683.86-0ubuntu0.18.04.1
- 74.0.3729.169-0ubuntu0.18.04.1
- 75.0.3770.90-0ubuntu0.18.04.1
- 75.0.3770.142-0ubuntu0.18.04.1
- 76.0.3809.87-0ubuntu0.18.04.1
- 76.0.3809.100-0ubuntu0.18.04.1
- 77.0.3865.90-0ubuntu0.18.04.1
- 78.0.3904.70-0ubuntu0.18.04.2
- 78.0.3904.97-0ubuntu0.18.04.1
- 78.0.3904.108-0ubuntu0.18.04.1
- 79.0.3945.79-0ubuntu0.18.04.1
- 79.0.3945.130-0ubuntu0.18.04.1
- 80.0.3987.87-0ubuntu0.18.04.1
- 80.0.3987.149-0ubuntu0.18.04.1
- 80.0.3987.163-0ubuntu0.18.04.1
- 81.0.4044.122-0ubuntu0.18.04.1
- 81.0.4044.138-0ubuntu0.18.04.1
- 83.0.4103.61-0ubuntu0.18.04.1
- 84.0.4147.105-0ubuntu0.18.04.1
- 85.0.4183.83-0ubuntu0.18.04.2
- 85.0.4183.121-0ubuntu0.18.04.1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 86.0.4240.75-0ubuntu0.18.04.1
Auf 86.0.4240.75-0ubuntu0.18.04.1 aktualisieren
Originalquellen
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1106890
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/
- https://www.debian.org/security/2021/dsa-4824
- https://nvd.nist.gov/vuln/detail/CVE-2020-15973