CVE-2020-16043

Description

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.373

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (87.0.4280.141)Windows
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac (87.0.4280.141)Mac
chromium security update(DSA-4832-1) chromium_87.0.4280.141-0.1~deb10u1_amd64.debLinux
chromium security update(DSA-4832-1) chromium_87.0.4280.141-0.1~deb10u1_i386.debLinux
chromium security update(DSA-4832-1) Debian_chromium_87.0.4280.141-0.1~deb10u1_amd64.debLinux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-317791Google Chrome (x64) (87.0.4280.141)
PATCH-317790Google Chrome (87.0.4280.141)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234