CVE-2020-6516

🗓️ 22 Jul 2020 16:16:02Reported by ChromeType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 227 Views

Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page

Reporter	Title	Published	Views	Family All 66
FreeBSD	chromium -- multiple vulnerabilities	14 Jul 202000:00	–	freebsd
BDU FSTEC	The vulnerability of the CORS mechanism implementation in Google Chrome web browsers allows a hacker to gain access to confidential information.	15 Jul 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : chromium-browser (RHSA-2020:3377)	9 Oct 202400:00	–	nessus
Tenable Nessus	Debian DSA-4824-1 : chromium - security update	4 Jan 202100:00	–	nessus
Tenable Nessus	Fedora 31 : chromium (2020-84d87cbd50)	3 Aug 202000:00	–	nessus
Tenable Nessus	Fedora 32 : chromium (2020-bf684961d9)	30 Jul 202000:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (870d59b0-c6c4-11ea-8015-e09467587c17)	16 Jul 202000:00	–	nessus
Tenable Nessus	GLSA-202007-08 : Chromium, Google Chrome: Multiple vulnerabilities	27 Jul 202000:00	–	nessus
Tenable Nessus	Google Chrome < 84.0.4147.89 Multiple Vulnerabilities	14 Jul 202000:00	–	nessus
Tenable Nessus	Google Chrome < 84.0.4147.89 Multiple Vulnerabilities	14 Jul 202000:00	–	nessus

NVD

Vulners

Node

google chromeRange<84.0.4147.89

Node

opensuse backports_sleMatch15.0sp1

opensuse backports_sleMatch15.0sp2

debian debian_linuxMatch10.0

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

opensuse leapMatch15.1

opensuse leapMatch15.2

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "84.0.4147.89",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html
security	www.security.gentoo.org/glsa/202007-08
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/
chromereleases	www.chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html
crbug	www.crbug.com/1092449
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html
debian	www.debian.org/security/2021/dsa-4824
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/

17 Jun 2026 03:23Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.3

CVSS 24.3

EPSS0.04765