CVE-2020-16021

Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.

Summary:

Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.

Reference Links(if available):

  • https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
  • https://crbug.com/1139414
  • CVSS Score (if available)

    v2: / HIGH

    v3: /

    Links to Exploits(if available)