Skip to content
OpenAdvisories
Unscored CVE-2020-16019 EUVD-2020-7986GHSA-g442-vq7g-fmrc

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised…

Published Jan 8, 2021 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 87.0.4280.66 87.0.4280.66

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 87.0.4280.88-0.1 —
Debian 13 chromium 87.0.4280.88-0.1 —
Debian 12 chromium 87.0.4280.88-0.1 —
Debian 10 chromium 87.0.4280.88-0.4~deb10u1 DSA-4824-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 87.0.4280.66-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 87.0.4280.66-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP2 chromium 87.0.4280.66-bp152.2.32.1 openSUSE-SU-2020:2026-1, openSUSE-SU-2020:2012-1
SUSE Package Hub 15 SP1 chromium 87.0.4280.66-bp151.3.131.1 openSUSE-SU-2020:2055-1, openSUSE-SU-2020:2010-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.2 chromium 87.0.4280.66-lp152.2.51.1 openSUSE-SU-2020:2021-1
openSUSE Leap 15.1 chromium 87.0.4280.66-lp151.2.156.1 openSUSE-SU-2020:2032-1

Advisories 9

References