CVE-2020-6439

chromium-browser: Insufficient policy enforcement in navigations

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6438

chromium-browser: Insufficient policy enforcement in extensions

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6437

chromium-browser: Inappropriate implementation in WebView

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.

CVSS 3.1 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6436

chromium-browser: Use after free in window management

Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6435

chromium-browser: Insufficient policy enforcement in extensions

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 1.7% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6434

chromium-browser: Use after free in devtools

Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6433

chromium-browser: Insufficient policy enforcement in extensions

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 1.7% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6432

chromium-browser: Insufficient policy enforcement in navigations

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 1.7% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6431

chromium-browser: Insufficient policy enforcement in full screen

Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6430

chromium-browser: Type Confusion in V8

Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6429

chromium-browser: Use after free in audio

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2020-6428

chromium-browser: Use after free in audio

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2020-6427

chromium-browser: Use after free in audio

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2020-6426

chromium-browser: Inappropriate implementation in V8

Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2020-6425

chromium-browser: Insufficient policy enforcement in extensions

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 2 more

CVE-2020-6424

chromium-browser: Use after free in media

Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2020-6423

chromium-browser: Use after free in audio

Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2020-6422

chromium-browser: Use after free in WebGL

Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2020-6416

chromium-browser: Insufficient data validation in streams

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 7 more

CVE-2020-6415

chromium-browser: Inappropriate implementation in JavaScript

Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 7 more