MediumFix available
chromium — security advisory
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
- Products
- chromium
- Affected versions
- Not specified
- Fixed versions
- 87.0.4280.88-0.1
- CVEs
- CVE-2020-15959
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 12:43 UTC · Revision 1
Source evidence
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
osv:DEBIAN-CVE-2020-15959
chromium
Fixed versions: 87.0.4280.88-0.1
chromium
Fixed versions: 87.0.4280.88-0.1
chromium
Fixed versions: 87.0.4280.88-0.1
Complete source record
{
"id": "c0f7ea29ba8592f2757dad0b6c9d719f0a9a837bd8726cd5aa987773b2b20e30",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2020-15959",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2020-15959",
"summary": "Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.",
"evidence": "osv:DEBIAN-CVE-2020-15959",
"products": [
{
"name": {
"value": "chromium",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "87.0.4280.88-0.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "chromium",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "87.0.4280.88-0.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "chromium",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "87.0.4280.88-0.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "DEBIAN-CVE-2020-15959",
"aliases": [
"DEBIAN-CVE-2020-15959"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "87.0.4280.88-0.1"
}
]
}
],
"package": {
"name": "chromium",
"purl": "pkg:deb/debian/chromium?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-15959.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "87.0.4280.88-0.1"
}
]
}
],
"package": {
"name": "chromium",
"purl": "pkg:deb/debian/chromium?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-15959.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "87.0.4280.88-0.1"
}
]
}
],
"package": {
"name": "chromium",
"purl": "pkg:deb/debian/chromium?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-15959.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T12:00:43.285321151Z",
"provider": "osv",
"upstream": [
"CVE-2020-15959"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2020-15959"
]
},
"related_cves": [
{
"value": "CVE-2020-15959",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 451291,
"published_at": "2020-09-21T20:15:12.617+00:00"
}