CVE-2020-6559: Use after free in presentation API
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-6559?
CVE-2020-6559 is a vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page in Google Chrome prior to version 85.0.4183.83.
How severe is CVE-2020-6559?
CVE-2020-6559 has a severity score of 8.8 (critical).
Which software versions are affected by CVE-2020-6559?
Google Chrome versions prior to 85.0.4183.83, openSUSE Backports SLE 15.0-sp1 and 15.0-sp2, Debian Linux 10.0, Fedora 33, openSUSE Leap 15.1 and 15.2.
How can I fix CVE-2020-6559?
To fix CVE-2020-6559, update Google Chrome to version 85.0.4183.83 or later, or apply the security patches provided by your operating system for openSUSE Backports SLE, Debian Linux, Fedora, or openSUSE Leap.
Where can I find more information about CVE-2020-6559?
You can find more information about CVE-2020-6559 at the following references: [link1](http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html), [link2](http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html), [link3](http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html).