Vulnerabilities > CVE-2020-15989 - Use of Uninitialized Resource vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE

Summary

Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.

Vulnerable Configurations

Part Description Count
Application
Google
5630
Application
Opensuse
1
OS
Fedoraproject
3
OS
Debian
1

Common Weakness Enumeration (CWE)