Published: 03/11/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Uninitialized data in PDFium in Google Chrome before 86.0.4240.75 allowed a remote malicious user to obtain potentially sensitive information from process memory via a crafted PDF file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
fedoraproject fedora 31
fedoraproject fedora 32
fedoraproject fedora 33
opensuse backports sle 15.0
debian debian linux 10.0

Synopsis Critical: chromium-browser security update Type/Severity Security Advisory: Critical Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scor ...

Multiple security issues were discovered in the Chromium web browser, which could result in the execution of arbitrary code, denial of service or information disclosure For the stable distribution (buster), these problems have been fixed in version 870428088-04~deb10u1 We recommend that you upgrade your chromium packages For the detailed sec ...

The Chrome team is delighted to announce the promotion of Chrome 86 to the stable channel for Windows, Mac and Linux This will roll out over the coming days/weeksChrome 860424075 contains a number of fixes and improvements -- a list of changes is available in the log Watch out for upcoming Chrome and Chromium blog pos ...

An uninitialized use security issue has been found in the PDFium component of the chromium browser before 860424075 ...

CWE-908 https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html https://crbug.com/1108351 http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html https://www.debian.org/security/2021/dsa-4824 https://security.gentoo.org/glsa/202101-30 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/https://access.redhat.com/errata/RHSA-2020:4235 https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4824

CVE-2020-15989

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect