CVE-2020-15961: Insufficient policy enforcement in extensions
Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Credit
Affected Software
Remediation
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2020-15961?
CVE-2020-15961 is classified as a high severity vulnerability due to the potential for sandbox escape.
How do I fix CVE-2020-15961?
To fix CVE-2020-15961, upgrade to Google Chrome version 85.0.4183.121 or later.
What platforms are affected by CVE-2020-15961?
CVE-2020-15961 affects Google Chrome versions prior to 85.0.4183.121 and certain Linux packages including Debian, openSUSE, and Fedora.
What type of vulnerability is CVE-2020-15961?
CVE-2020-15961 is an insufficient policy validation vulnerability found in Chrome extensions.
Can CVE-2020-15961 be exploited remotely?
Yes, CVE-2020-15961 can be exploited if a user is convinced to install a malicious Chrome extension.