CVE-2020-6442

MEDIUM

Google Chrome < 81.0.4044.92 - Exposure to Wrong Actor

Title source: rule

Description

Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

References (8)

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html

[Release Notes, Vendor Advisory] https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html

[Exploit, Vendor Advisory] https://crbug.com/1013906

[Third Party Advisory] https://www.debian.org/security/2020/dsa-4714

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/

Scores

CVSS v3 4.3

EPSS 0.0109

EPSS Percentile 77.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Classification

CWE

CWE-668

Status published

Affected Products (7)

google/chrome < 81.0.4044.92

debian/debian_linux

fedoraproject/fedora

opensuse/backports

opensuse/leap

Timeline

Published Apr 13, 2020

Tracked Since Feb 18, 2026