PHP2Shell: Read our blog on the critical RCE vulnerabilities affecting 70% of the Internet

CVE-2020-15959: 
Google Chrome vulnerability analysis and mitigation

Overview

CVE-2020-15959 is a security vulnerability discovered in Google Chrome versions prior to 85.0.4183.102. The vulnerability was reported by Eric Lawrence of Microsoft on August 27, 2020, and involves insufficient policy enforcement in networking functionality (Chrome Releases).

Technical details

The vulnerability is classified as High severity and stems from insufficient policy enforcement in the networking component of Google Chrome. The issue specifically manifests when a user is convinced to enable logging, potentially allowing an attacker to obtain sensitive information from process memory through social engineering tactics (NVD).

Impact

When successfully exploited, this vulnerability could allow an attacker to access potentially sensitive information from process memory, but only after convincing a user to enable logging through social engineering methods (CVE).

Exploitability

The vulnerability requires user interaction in the form of enabling logging functionality, making it a social engineering-dependent exploit. The attacker must first convince the user to enable logging before they can potentially access sensitive information from process memory (NVD).

Mitigation and workarounds

The vulnerability was patched in Google Chrome version 85.0.4183.102. Users and administrators are advised to update to this version or later to mitigate the risk. Multiple Linux distributions including Debian, Fedora, and Gentoo have also released security updates to address this vulnerability (Debian Security, Fedora Update).

Additional resources


Source: This report was generated using AI

Related Google Chrome vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-113342CRITICAL9.6
  • Google Chrome logoGoogle Chrome
  • chromium
NoYesOct 20, 2026
CVE-2026-113344HIGH8.8
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesOct 20, 2026
CVE-2026-113343HIGH8.8
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesOct 20, 2026
CVE-2026-113341MEDIUM6.5
  • Google Chrome logoGoogle Chrome
  • webkitgtk4
NoYesOct 20, 2026
CVE-2026-113340MEDIUM6.5
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesOct 20, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management