CVE-2020-6511

Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6511

CVE-2020-6511 is a side-channel information leakage in Chrome/Chromium’s content security policy that could disclose cross-origin data via a crafted HTML page. Affected products: Google Chrome/Chromium before 84.0.4147.89. Impact: cross-origin data disclosure. Root cause: CSP implementation leaka...

CVE-2020-6511

Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6511

Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6531: Observable Discrepancy

Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6511: Generation of Error Message Containing Sensitive Information

Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6529: Improper Certificate Validation

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page...

CVE-2020-6516: Undefined Security Weakness

Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6529

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page...

CVE-2020-6516

Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-6511

Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2020-5704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to an information leak in the Content Security Policy component of Google Chrome, which can be exploited by a remote attacker to access confidential data. This can b...

PT-2020-5698

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to side-channel information leakage in the scroll to text feature, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potential...

PT-2020-5667

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to an inappropriate implementation in WebRTC, allowing an attacker in a privileged network position to leak cross-origin data via a crafted HTML page. It is also...

PT-2020-6232

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a policy bypass in the CORS mechanism of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can enable the attacker...

chromium-browser: Insufficient data validation in loader

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...

PT-2020-6197

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.66 Firefox affected versions not specified Firefox ESR affected versions not specified Thunderbird affected versions not specified Description The issue is related to a data source confirmation error,...

CVE-2020-6490

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...

CVE-2020-6490

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...

Input validation

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...