CVE-2020-15959: Insufficient policy enforcement in networking
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2020-15959?
CVE-2020-15959 has a medium severity rating due to the potential for sensitive information disclosure through social engineering.
How do I fix CVE-2020-15959?
To mitigate CVE-2020-15959, update Google Chrome to version 85.0.4183.102 or later.
Which versions of Google Chrome are affected by CVE-2020-15959?
CVE-2020-15959 affects Google Chrome versions before 85.0.4183.102.
Can attackers exploit CVE-2020-15959 remotely?
CVE-2020-15959 requires user interaction to enable logging, making it a social engineering exploit rather than a direct remote attack.
Is CVE-2020-15959 applicable to Linux distributions?
Yes, CVE-2020-15959 is applicable to multiple Linux distributions that use affected versions of Google Chrome.