CVE-2020-6477

Description

Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.031

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (83.0.4103.61)Windows
Multiple vulnerabilities fixed in Google Chrome (83.0.4103.61)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac (83.0.4103.61)Mac
Multiple vulnerabilities fixed in Google Chrome (83.0.4103.61) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (83.0.4103.61) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (83.0.4103.61) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (83.0.4103.61) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (83.0.4103.61) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-314313Google Chrome (x64) (83.0.4103.61)
PATCH-314312Google Chrome (83.0.4103.61)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234