CVE-2020-6555high
Description
Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
References
https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
https://security.gentoo.org/glsa/202101-30
https://www.debian.org/security/2021/dsa-4824
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1123
Details
Source: MITRE
Published: 2020-09-21
Updated: 2021-01-27
Type: CWE-125
Risk Information
CVSS v2
Base Score: 6.8
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3
Base Score: 7.6
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Impact Score: 4.7
Exploitability Score: 2.8
Severity: HIGH