← Back

CVE-2020-6567

nvd nist
Published: Sep 21, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Affected (7)

Products: Google: Chrome · Debian: Debian Linux · Fedoraproject: Fedora · +1 more
Show all products
Google: Chrome · Debian: Debian Linux · Fedoraproject: Fedora · Opensuse: Backports Sle, Leap
Google
1 product
Chrome
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Opensuse
2 products
Backports Sle
Leap
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 85.0.4183.83
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 10.0
Fedora
Version 33
Opensuse
Backports Sle
Version 15.0 sp1
Backports Sle
Version 15.0 sp2
Opensuse
Leap
Version 15.1
Leap
Version 15.2

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

Source: chrome-cve-admin@google.com
Mailing ListPatchThird Party Advisory
Source: chrome-cve-admin@google.com
Mailing ListThird Party Advisory
Source: chrome-cve-admin@google.com
Mailing ListThird Party Advisory
Source: chrome-cve-admin@google.com
Release NotesVendor Advisory
Source: chrome-cve-admin@google.com
Permissions RequiredVendor Advisory
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.