CVE-2020-6444

Medium

Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a…

Chrome·CWE-908·Published 2020-04-13

CVSS

6.3

EPSS

0.01

KEV

Exploits

Vendor statements (6)

lists.opensuse.org
lists.opensuse.org
lists.fedoraproject.org
lists.fedoraproject.org
lists.fedoraproject.org
debian.org

cve.orgen

156 chars

Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

NVDes

212 chars

Un uso no inicializado en WebRTC en Google Chrome versiones anteriores a 81.0.4044.92, permitió a un atacante remoto explotar potencialmente una corrupción de la pila (heap) por medio de una página HTML diseñada.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	6.3	2.8	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L