First published: Tue Nov 03 2020(Updated: )
Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
Credit: chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome | <86.0.4240.75 | |
Apple Mac OS X | ||
Debian Debian Linux | =10.0 | |
Fedoraproject Fedora | =31 | |
Fedoraproject Fedora | =32 | |
Fedoraproject Fedora | =33 | |
openSUSE Backports SLE | =15.0-sp2 | |
debian/chromium | 90.0.4430.212-1~deb10u1 116.0.5845.180-1~deb11u1 120.0.6099.129-1~deb11u1 119.0.6045.199-1~deb12u1 120.0.6099.129-1~deb12u1 120.0.6099.129-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-15977.
The severity of CVE-2020-15977 is medium.
CVE-2020-15977 allows a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page in Google Chrome on OS X prior to version 86.0.4240.75.
To fix CVE-2020-15977, update to Google Chrome version 86.0.4240.75 or later.
No, other operating systems are not affected by CVE-2020-15977.