Home

CVE-2020-6542

Description

Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.653

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (84.0.4147.125)Windows
Multiple vulnerabilities fixed in Google Chrome (84.0.4147.125)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (84.0.522.59)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (84.0.522.59)Windows
Multiple vulnerabilities affected in Google Chrome (x64) 84.0.4147.124(x64)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac (84.0.4147.125)Mac
chromium security update(DSA-4824-1) chromium_87.0.4280.88-0.4~deb10u1_i386.debLinux
chromium security update(DSA-4824-1) chromium_87.0.4280.88-0.4~deb10u1_amd64.debLinux
Multiple vulnerabilities fixed in Google Chrome (84.0.4147.125) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (84.0.4147.125) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (84.0.4147.125) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (84.0.4147.125) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (84.0.4147.125) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-315450Google Chrome (x64) (84.0.4147.125)
PATCH-315449Google Chrome (84.0.4147.125)
PATCH-109332Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-109333Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-343228Google Chrome (x64) (131.0.6778.85, 131.0.6778.86)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234