deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-8201
Published: 2020-09-18
Description: Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the architecture of the underlying system. The attack was possible due to a bug in processing of carrier-return symbols in the HTTP header names.
CVSS Score: 7.4 (HIGH)
CWE: CWE-444, CWE-444
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html; https://hackerone.com/reports/922597; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
CVE: CVE-2020-8225
Published: 2020-09-18
Description: A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-312
References: https://hackerone.com/reports/685990; https://nextcloud.com/security/advisory/?id=NC-SA-2020-031; https://hackerone.com/reports/685990
CVE: CVE-2020-8237
Published: 2020-09-18
Description: Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/916430; https://hackerone.com/reports/916430
CVE: CVE-2020-8245
Published: 2020-09-18
Description: Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b leads to an HTML Injection attack against the SSL VPN web portal.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.citrix.com/article/CTX281474; https://support.citrix.com/article/CTX281474
CVE: CVE-2020-8246
Published: 2020-09-18
Description: Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the management network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://support.citrix.com/article/CTX281474; https://support.citrix.com/article/CTX281474
CVE: CVE-2020-8247
Published: 2020-09-18
Description: Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://support.citrix.com/article/CTX281474; https://support.citrix.com/article/CTX281474
CVE: CVE-2020-8251
Published: 2020-09-18
Description: Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/868834; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/; https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
CVE: CVE-2020-8252
Published: 2020-09-18
Description: The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00023.html; https://hackerone.com/reports/965914
CVE: CVE-2020-8253
Published: 2020-09-18
Description: Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 leads to the ability to access sensitive files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://support.citrix.com/article/CTX277457; https://support.citrix.com/article/CTX277457
CVE: CVE-2020-5421
Published: 2020-09-19
Description: In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
CVSS Score: 6.5 (MEDIUM)
References: https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b[PII_REDACTED]54442163%40%3Ccommits.ambari.apache.org%3E; https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3E; https://lists.apache.org/thread.html/r3589ed0d18edeb[PII_REDACTED]0d5a0e[PII_REDACTED]bb91774a3196d9eb%40%3Ccommits.pulsar.apache.org%3E
CVE: CVE-2020-25786
Published: 2020-09-19
Description: webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/sek1th/iot/blob/master/DIR-816L_XSS.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10190; https://github.com/sek1th/iot/blob/master/DIR-816L_XSS.md
CVE: CVE-2020-25787
Published: 2020-09-19
Description: An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/161606/TinyTinyRSS-Remote-Code-Execution.html; https://blog.neagaru.com/p/exploiting-tiny-tiny-rss-2020; https://community.tt-rss.org/t/heads-up-several-vulnerabilities-fixed/3799
CVE: CVE-2020-25788
Published: 2020-09-19
Description: An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.
CVSS Score: 8.1 (HIGH)
CWE: CWE-829
References: https://blog.neagaru.com/p/exploiting-tiny-tiny-rss-2020; https://community.tt-rss.org/t/heads-up-several-vulnerabilities-fixed/3799; https://git.tt-rss.org/fox/tt-rss/commit/c3d14e1fa54c7dade7b1b7955575e2991396d7ef
CVE: CVE-2020-25789
Published: 2020-09-19
Description: An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.neagaru.com/p/exploiting-tiny-tiny-rss-2020; https://community.tt-rss.org/t/heads-up-several-vulnerabilities-fixed/3799; https://git.tt-rss.org/fox/tt-rss/commit/da5af2fae091041cca27b24b6f0e69e4a6d0dc60
CVE: CVE-2020-25790
Published: 2020-09-19
Description: Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/159503/Typesetter-CMS-5.1-Remote-Code-Execution.html; http://packetstormsecurity.com/files/159615/Typesetter-CMS-5.1-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Oct/11
CVE: CVE-2020-25791
Published: 2020-09-19
Description: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://github.com/bodil/sized-chunks/issues/11; https://rustsec.org/advisories/RUSTSEC-2020-0041.html; https://github.com/bodil/sized-chunks/issues/11
CVE: CVE-2020-25792
Published: 2020-09-19
Description: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().
CVSS Score: 7.5 (HIGH)
CWE: CWE-129, CWE-129
References: https://github.com/bodil/sized-chunks/commit/3ae48bd463c1af41c24b96b84079946f51f51e3c; https://github.com/bodil/sized-chunks/issues/11; https://rustsec.org/advisories/RUSTSEC-2020-0041.html
CVE: CVE-2020-25793
Published: 2020-09-19
Description: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From<InlineArray<A, T>>.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://github.com/bodil/sized-chunks/issues/11; https://rustsec.org/advisories/RUSTSEC-2020-0041.html; https://github.com/bodil/sized-chunks/issues/11
CVE: CVE-2020-25794
Published: 2020-09-19
Description: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/bodil/sized-chunks/issues/11; https://rustsec.org/advisories/RUSTSEC-2020-0041.html; https://github.com/bodil/sized-chunks/issues/11
CVE: CVE-2020-25795
Published: 2020-09-19
Description: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, insert_from can have a memory-safety issue upon a panic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/bodil/sized-chunks/issues/11; https://rustsec.org/advisories/RUSTSEC-2020-0041.html; https://github.com/bodil/sized-chunks/issues/11
CVE: CVE-2020-25796
Published: 2020-09-19
Description: An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://github.com/bodil/sized-chunks/issues/11; https://rustsec.org/advisories/RUSTSEC-2020-0041.html; https://github.com/bodil/sized-chunks/issues/11
CVE: CVE-2020-14177
Published: 2020-09-21
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service (DoS) vulnerability in JQL version searching. The affected versions are before version 7.13.16; from version 7.14.0 before 8.5.7; from version 8.6.0 before 8.10.2; and from version 8.11.0 before 8.11.1.
CVSS Score: 6.5 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-71388; https://jira.atlassian.com/browse/JRASERVER-71388
CVE: CVE-2020-14179
Published: 2020-09-21
Description: Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The affected versions are before version 8.5.8, and from version 8.6.0 before 8.11.1.
CVSS Score: 5.3 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-71536; https://jira.atlassian.com/browse/JRASERVER-71536
CVE: CVE-2020-14180
Published: 2020-09-21
Description: Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource. The affected versions are before version 4.12.0.
CVSS Score: 4.3 (MEDIUM)
References: https://jira.atlassian.com/browse/JSDSERVER-6917; https://jira.atlassian.com/browse/JSDSERVER-6917
CVE: CVE-2020-16171
Published: 2020-09-21
Description: An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard header. The value of this header is afterwards used in a separate web request issued by the application itself. This can be abused to conduct SSRF attacks against otherwise unreachable Acronis services that are bound to localhost such as the NotificationService on 127.0.0.1:30572.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://seclists.org/fulldisclosure/2020/Sep/33; https://www.rcesecurity.com/2020/09/CVE-2020-16171-Exploiting-Acronis-Cyber-Backup-for-Fun-and-Emails/; http://seclists.org/fulldisclosure/2020/Sep/33
CVE: CVE-2020-4315
Published: 2020-09-21
Description: IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177234.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177234; https://www.ibm.com/support/pages/node/6334813; https://exchange.xforce.ibmcloud.com/vulnerabilities/177234
CVE: CVE-2020-4579
Published: 2020-09-21
Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters. IBM X-Force ID: 184438.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184438; https://www.ibm.com/support/pages/node/6334703; https://exchange.xforce.ibmcloud.com/vulnerabilities/184438
CVE: CVE-2020-4580
Published: 2020-09-21
Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters. IBM X-Force ID: 184439.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184439; https://www.ibm.com/support/pages/node/6334705; https://exchange.xforce.ibmcloud.com/vulnerabilities/184439
CVE: CVE-2020-4581
Published: 2020-09-21
Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfer-encoding HTTP/2 request. IBM X-Force ID: 184441.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184441; https://www.ibm.com/support/pages/node/6334707; https://exchange.xforce.ibmcloud.com/vulnerabilities/184441
CVE: CVE-2020-4590
Published: 2020-09-21
Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184650; https://www.ibm.com/support/pages/node/6333623; https://exchange.xforce.ibmcloud.com/vulnerabilities/184650
CVE: CVE-2020-4731
Published: 2020-09-21
Description: IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188055.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/188055; https://www.ibm.com/support/pages/node/6326929; https://exchange.xforce.ibmcloud.com/vulnerabilities/188055
CVE: CVE-2020-4643
Published: 2020-09-21
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information. IBM X-Force ID: 185590.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/185590; https://www.ibm.com/support/pages/node/6334311; https://exchange.xforce.ibmcloud.com/vulnerabilities/185590
CVE: CVE-2020-15959
Published: 2020-09-21
Description: Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html
CVE: CVE-2020-15960
Published: 2020-09-21
Description: Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-15961
Published: 2020-09-21
Description: Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVSS Score: 9.6 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-15962
Published: 2020-09-21
Description: Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-15963
Published: 2020-09-21
Description: Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVSS Score: 9.6 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-15964
Published: 2020-09-21
Description: Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-476, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-15965
Published: 2020-09-21
Description: Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-15966
Published: 2020-09-21
Description: Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html
CVE: CVE-2020-6532
Published: 2020-09-21
Description: Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html; https://crbug.com/1104061; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
CVE: CVE-2020-6537
Published: 2020-09-21
Description: Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html; https://crbug.com/1105318; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
CVE: CVE-2020-6538
Published: 2020-09-21
Description: Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html; https://crbug.com/1096677; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
CVE: CVE-2020-6539
Published: 2020-09-21
Description: Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html; https://crbug.com/1105635; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
CVE: CVE-2020-6540
Published: 2020-09-21
Description: Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html; https://crbug.com/1105720; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
CVE: CVE-2020-6541
Published: 2020-09-21
Description: Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: http://packetstormsecurity.com/files/159610/Chrome-USB-OnServiceConnectionError-Use-After-Free.html; https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html; https://crbug.com/1106773