CVE-2020-6488

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Link	Resource
https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	Release Notes Vendor Advisory
https://crbug.com/1044277	Exploit Vendor Advisory
https://security.gentoo.org/glsa/202006-02	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	Mailing List Third Party Advisory
https://www.debian.org/security/2020/dsa-4714	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	Mailing List Third Party Advisory

Configuration 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*

---

Published : 2020-05-21 04:15

Updated : 2022-10-05 07:29

---

NVD link : CVE-2020-6488

Mitre link : CVE-2020-6488

No products.

CWE-276

Incorrect Default Permissions