CVE-2020-16019 - chromium-browser: Inappropriate implementation in filesystem

Back Back to CVE browser

HIGH

chromium-browser: Inappropriate implementation in filesystem

Published Jan 8, 2021

8.8

HIGH

CVSS 3.1

EPSS 0.88%

Description

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.

Affected products

Vendor Google Product Chrome Default
unknown
Affected
- ≥ unspecified, < 87.0.4280.66

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ unspecified, < 87.0.4280.66

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	chromium-browser	Will not fix	n/a

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

https://access.redhat.com/security/cve/CVE-2020-16019
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1899223
Issue Tracking
https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
x_refsource_MISCRelease NotesVendor Advisory
https://crbug.com/1139408
x_refsource_MISCPermissions RequiredVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7986
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-16019
https://www.cve.org/CVERecord?id=CVE-2020-16019

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2020-16019		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1899223		Issue Tracking
https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html		x_refsource_MISCRelease NotesVendor Advisory
https://crbug.com/1139408		x_refsource_MISCPermissions RequiredVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7986		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-16019
https://www.cve.org/CVERecord?id=CVE-2020-16019

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Jan 8, 2021

Updated Aug 4, 2024

Reserved Jul 27, 2020

Link CVE-2020-16019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-16019

Red Hat

Severity Important

Public date Nov 17, 2020

Bugzilla 1899223

Link CVE-2020-16019

ENISA EUVD

Assigner Chrome

Published Jan 8, 2021

Updated Aug 4, 2024

Link EUVD-2020-7986

GitHub

No data