Description
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google Chrome
unspecified to < 85.0.4183.102affected
References
- https://crbug.com/1122684 ↗
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html ↗
- https://www.debian.org/security/2021/dsa-4824 ↗
- https://security.gentoo.org/glsa/202101-30 ↗