| Description: | Summary:
Google Chrome is prone to multiple vulnerabilities.
Vulnerability Insight:
Multiple flaws exist due to
- Use after free in reader mode.
- Use after free in media.
- Use after free in WebRTC.
- Type Confusion in V8.
- Insufficient policy enforcement in developer tools.
- Insufficient validation of untrusted input in clipboard.
- Insufficient policy enforcement in Blink.
- Use after free in Blink.
- Incorrect security UI in full screen.
- Insufficient policy enforcement in tab strip.
- Inappropriate implementation in installer.
- Inappropriate implementation in full screen.
- Inappropriate implementation in sharing.
- Insufficient policy enforcement in enterprise.
- Insufficient policy enforcement in URL formatting.
- Insufficient policy enforcement in payments.
- Insufficient data validation in ChromeDriver.
- Insufficient data validation in media router.
- Insufficient policy enforcement in navigations.
- Insufficient policy enforcement in downloads.
- Inappropriate implementation in developer tools.
- Insufficient data validation in loader.
- Incorrect security UI in site information.
Vulnerability Impact:
Successful exploitation allows attackers to
execute arbitrary code, read sensitive information, bypass security restrictions,
perform unauthorized actions or cause denial of service conditions.
Affected Software/OS:
Google Chrome version prior to 83.0.4103.61.
Solution:
Update to Google Chrome 83.0.4103.61 or later.
CVSS Score:
6.8
CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
