CVE-2020-16021

Katalog CVE

CVSS 7.5 · High EPSS 0,64%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada google chrome. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.

Rincian

Terbit di NVD

8 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html release notes · advisory vendor
• https://crbug.com/1139414 permissions required · advisory vendor