
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-15959 is a security vulnerability discovered in Google Chrome versions prior to 85.0.4183.102. The vulnerability was reported by Eric Lawrence of Microsoft on August 27, 2020, and involves insufficient policy enforcement in networking functionality (Chrome Releases).
The vulnerability is classified as High severity and stems from insufficient policy enforcement in the networking component of Google Chrome. The issue specifically manifests when a user is convinced to enable logging, potentially allowing an attacker to obtain sensitive information from process memory through social engineering tactics (NVD).
When successfully exploited, this vulnerability could allow an attacker to access potentially sensitive information from process memory, but only after convincing a user to enable logging through social engineering methods (CVE).
The vulnerability requires user interaction in the form of enabling logging functionality, making it a social engineering-dependent exploit. The attacker must first convince the user to enable logging before they can potentially access sensitive information from process memory (NVD).
The vulnerability was patched in Google Chrome version 85.0.4183.102. Users and administrators are advised to update to this version or later to mitigate the risk. Multiple Linux distributions including Debian, Fedora, and Gentoo have also released security updates to address this vulnerability (Debian Security, Fedora Update).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."