CVE-2020-15959

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.

• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.htmlMailing List, Third Party Advisory
• https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.htmlRelease Notes, Vendor Advisory
• https://crbug.com/1122684Permissions Required, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/
• https://security.gentoo.org/glsa/202101-30Third Party Advisory
• https://www.debian.org/security/2021/dsa-4824Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.htmlMailing List, Third Party Advisory
• https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.htmlRelease Notes, Vendor Advisory
• https://crbug.com/1122684Permissions Required, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/
• https://security.gentoo.org/glsa/202101-30Third Party Advisory
• https://www.debian.org/security/2021/dsa-4824Third Party Advisory

Published

Sep 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15953LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 …7.4
• CVE-2020-15954KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 c…6.5
• CVE-2020-15955In s/qmail through 4.0.07, an active MitM can inject arbitra…5.9
• CVE-2020-15956ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42…7.5
• CVE-2020-15957An issue was discovered in DP3T-Backend-SDK before 1.1.1 for…7.5
• CVE-2020-15958An issue was discovered in 1CRM System through 8.6.7. An ins…8.6
• CVE-2020-1596<p>A information disclosure vulnerability exists when TLS co…5.4
• CVE-2020-15960Heap buffer overflow in storage in Google Chrome prior to 85…8.8
• CVE-2020-15961Insufficient policy validation in extensions in Google Chrom…9.6
• CVE-2020-15962Insufficient policy validation in serial in Google Chrome pr…8.8
• CVE-2020-15963Insufficient policy enforcement in extensions in Google Chro…9.6
• CVE-2020-15964Insufficient data validation in media in Google Chrome prior…8.8