CVE-2020-6495

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

Design/Logic Flaw

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2020-6495

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2020-6497

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI...

CVE-2020-6504

Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a crafted HTML page...

CVE-2020-6504

Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a crafted HTML page...

CVE-2020-6504

CVE-2020-6504 affects Google Chrome notifications, where insufficient policy enforcement allowed a remote attacker to bypass notification restrictions via a crafted HTML page. The issue applies to Chrome prior to 74.0.3729.108; remediation is to update to 74.0.3729.108 or later. The connected rec...

CVE-2020-6501

CVE-2020-6501 affects Google Chrome versions prior to 80.0.3987.87, due to insufficient policy enforcement in CSP, which could allow a remote attacker to bypass the content security policy via a crafted HTML page. Impact: CSP bypass. Mitigation: update Chrome to 80.0.3987.87 or later. Connected d...

CVE-2020-6497

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI...

CVE-2020-6497

CVE-2020-6497 is a policy enforcement issue in Omnibox on Google Chrome for iOS, allowing domain spoofing via a crafted URI. The connected Nessus entries confirm this CVE is part of the Chrome 83.0.4103.88– era fixes set. Affected component: Omnibox URL handling; root cause: insufficient policy e...

CVE-2020-6497

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI...

CVE-2020-6495

CVE-2020-6495 refers to an insufficient policy enforcement vulnerability in Google Chrome’s Developer Tools prior to 83.0.4103.97. The issue, identified in multiple sources (CNVD-2020-32320; Arch Linux ASA-202006-3; Debian/ Gentoo advisories), enables a threat actor to exploit a crafted Chrome ex...

CVE-2020-6495

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2020-6495

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2011-2863

The CVE describes an information-disclosure vulnerability in Google Chrome’s V8 JavaScript engine, occurring in versions before 14.0.0.0 due to insufficient policy enforcement. A remote attacker could obtain potentially sensitive information from process memory via a crafted HTML page. Affected p...

CVE-2011-2863

Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

CVE-2011-2863

Removed by vendor...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 5 security fixes. Below, we highlight fixes that were contributed by external researchers. 1082105 High CVE-2020-6493: Use after free in WebAuthentication. Reported by Anonymous on 2020-05-13 1083972 High CVE-2020-6494: Incorrect security UI in...

Stable Channel Update for Desktop

The stable channel has been updated to 83.0.4103.97 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

KLA11817 Multiple vulnerability in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Insufficient policy enforcement vulnerability in WebViewcan be exploited to bypass...