Skip to content
OpenAdvisories
Unscored CVE-2020-6477 EUVD-2020-27627GHSA-4q6x-94h2-2575

Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege esca…

Published May 21, 2020 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 83.0.4103.61 83.0.4103.61

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 83.0.4103.61-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 84.0.4147.105-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP1 chromium 83.0.4103.97-bp151.3.85.1 openSUSE-SU-2020:0832-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.1 chromium 83.0.4103.97-lp151.2.96.1 openSUSE-SU-2020:0823-1

Advisories 4

References