CVE-2020-6514
MEDIUMGoogle Chrome < 84.0.4147.89 - Information Disclosure
Title source: ruleDescription
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
Exploits (4)
References (27)
... and 7 more
Scores
CVSS v3
6.5
EPSS
0.1446
EPSS Percentile
94.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-200
Status
published
Products (16)
apple/ipados
< 13.6
apple/iphone_os
< 13.6
apple/safari
< 13.1.2
apple/tvos
< 13.4.8
apple/watchos
< 6.2.8
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
canonical/ubuntu_linux
20.04
debian/debian_linux
9.0
debian/debian_linux
10.0
... and 6 more
Published
Jul 22, 2020
Tracked Since
Feb 18, 2026