CVE-2020-6462

Name	CVE-2020-6462
Description	Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severity	medium

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
chromium (PTS)	stretch (security)	73.0.3683.75-1~deb9u1	vulnerable
	buster, buster (security)	80.0.3987.162-1~deb10u1	vulnerable
	bullseye, sid	81.0.4044.92-1	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
chromium	source	(unstable)	(unfixed)
chromium	source	stretch	(unfixed)	end-of-life

[stretch] - chromium <end-of-life> (see DSA 4562)