Published: 03/11/2020 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Insufficient policy enforcement in networking in Google Chrome before 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
debian debian linux 10.0
opensuse backports sle 15.0
fedoraproject fedora 31
fedoraproject fedora 32
fedoraproject fedora 33

Synopsis Critical: chromium-browser security update Type/Severity Security Advisory: Critical Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scor ...

Multiple security issues were discovered in the Chromium web browser, which could result in the execution of arbitrary code, denial of service or information disclosure For the stable distribution (buster), these problems have been fixed in version 870428088-04~deb10u1 We recommend that you upgrade your chromium packages For the detailed sec ...

An insufficient policy enforcement security issue has been found in the networking component of the chromium browser before 860424075 ...

The Chrome team is delighted to announce the promotion of Chrome 86 to the stable channel for Windows, Mac and Linux This will roll out over the coming days/weeksChrome 860424075 contains a number of fixes and improvements -- a list of changes is available in the log Watch out for upcoming Chrome and Chromium blog pos ...

NVD-CWE-noinfo https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html https://crbug.com/1110195 http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html https://www.debian.org/security/2021/dsa-4824 https://security.gentoo.org/glsa/202101-30 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/https://access.redhat.com/errata/RHSA-2020:4235 https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4824

CVE-2020-15992

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect