CVE-2020-6439
Severity
8.8HIGH
EPSS
0.9%
top 24.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 13
Latest updateMay 24
Description
Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages5 packages
Also affects: Debian Linux 10.0, 9.0, Fedora 30, 31, 32
🔴Vulnerability Details
3GHSA▶
GHSA-36x6-ccrg-4wf7: Insufficient policy enforcement in navigations in Google Chrome prior to 81↗2022-05-24
CVEList▶
CVE-2020-6439: Insufficient policy enforcement in navigations in Google Chrome prior to 81↗2020-04-13
OSV▶
CVE-2020-6439: Insufficient policy enforcement in navigations in Google Chrome prior to 81↗2020-04-13
📋Vendor Advisories
3💬Community
3Bugzilla▶
CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-↗2020-04-09
Bugzilla▶
CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-↗2020-04-09