Unscored CVE-2020-15997 EUVD-2020-7968GHSA-pv4c-f5cp-hcvh

Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potenti…

Published Nov 3, 2020 · Updated Aug 4, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Category: Browsers

Description

Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Affected products

Vendor	Product	Affected	Fixed
Google	Chrome	unspecified – < 86.0.4240.99	86.0.4240.99

References

https://chromereleases.googleblog.com/2020/10/chrome-for-android-update_31.html
https://crbug.com/1133668