CVE-2020-16007 - log back

CVE-2020-16007 edited at 03 Nov 2020 20:56:05
Type
- Insufficient validation
+ Privilege escalation
CVE-2020-16007 edited at 03 Nov 2020 09:35:40
Remote
- Remote
+ Local
Description
- An insufficient data validation security issue has been found in the installer component of the chromium browser before 86.0.4240.75.
+ An insufficient data validation security issue has been found in the installer component of the chromium browser before 86.0.4240.75, allowing a local attacker to potentially elevate privilege via a crafted filesystem.
CVE-2020-16007 edited at 03 Nov 2020 08:46:53
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Insufficient validation
Description
+ An insufficient data validation security issue has been found in the installer component of the chromium browser before 86.0.4240.75.
References
+ https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
+ https://crbug.com/1125018
Notes
CVE-2020-16007 created at 03 Nov 2020 08:44:37