ID:6557 - Exploit for Improperly implemented security check for standard in Google Chrome - CVE-2020-6514

 
Main Vulnerability Database Exploits ID:6557 - Exploit for Improperly implemented security check for standard in Google Chrome - CVE-2020-6514

ID:6557 - Exploit for Improperly implemented security check for standard in Google Chrome - CVE-2020-6514

Published: July 25, 2021


Vulnerability identifier: #VU29860
Vulnerability risk: Medium
CVE-ID: CVE-2020-6514
CWE-ID: CWE-358
Exploitation vector: Remote access
Vulnerable software:
Google Chrome

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to WebRTC used the memory address of a class instance as a connection identifier. A remote attacker can use the obtained value to bypass ASLR protection.

Remediation

Update to version 84.0.4147.89.