CVE-2020-15959

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.

Link	Resource
https://crbug.com/1122684	Permissions Required Vendor Advisory
https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html	Release Notes Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html	Mailing List Third Party Advisory
https://www.debian.org/security/2021/dsa-4824	Third Party Advisory
https://security.gentoo.org/glsa/202101-30	Third Party Advisory

Configuration 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

---

Published : 2020-09-21 08:15

Updated : 2021-01-30 02:20

---

NVD link : CVE-2020-15959

Mitre link : CVE-2020-15959

No products.

NVD-CWE-Other