First published: Fri Sep 11 2020(Updated: )
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit: chrome-cve-admin@google.com Avihay Cohen @ SeraphicAlgorithms
Affected Software | Affected Version | How to fix |
---|---|---|
debian/chromium | 90.0.4430.212-1~deb10u1 116.0.5845.180-1~deb11u1 120.0.6099.129-1~deb11u1 119.0.6045.199-1~deb12u1 120.0.6099.129-1~deb12u1 120.0.6099.129-1 | |
Google Chrome | <86.0.4240.75 | |
Debian Debian Linux | =10.0 | |
Fedoraproject Fedora | =31 | |
Fedoraproject Fedora | =32 | |
Fedoraproject Fedora | =33 | |
openSUSE Backports SLE | =15.0-sp2 | |
Google Chrome | <86.0.4240.75 | 86.0.4240.75 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-15979 is a vulnerability in Google Chrome prior to version 86.0.4240.75 that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Google Chrome prior to version 86.0.4240.75, Debian Debian Linux 10.0, Fedoraproject Fedora 31, 32, and 33, and openSUSE Backports SLE 15.0-sp2 are affected by CVE-2020-15979.
The severity of CVE-2020-15979 is high with a severity score of 8.8.
To fix CVE-2020-15979, update Google Chrome to version 86.0.4240.75 or later.
You can find more information about CVE-2020-15979 at the following references: [1] [2] [3].