HIGH

CVE-2020-6572

Google Chrome 2021-01-14 CVSS v3.1

CVSS

8.8

KEV

Description

Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Summary dbcve.org

A use-after-free vulnerability in Google Chrome's Media component (versions prior to 81.0.4044.92) allows a remote attacker to execute arbitrary code via a crafted HTML page. The vulnerability occurs when the browser continues to use a memory pointer after it has been freed, potentially enabling an attacker to manipulate memory and achieve code execution.

Mitigation

Update Google Chrome to version 81.0.4044.92 or later. This is a client-side vulnerability; users should update their browser installations promptly.

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

10.59%

Probability of exploitation in next 30 days

95.6th percentile

References

https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html Release Notes, Vendor Advisory https://crbug.com/1066893 Permissions Required, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-6572 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE