CVE-2020-36765

2024-07-1622:30:25

Chrome

github.com

google chrome

policy enforcement

remote attacker

data leakage

crafted html page

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "status": "affected",
        "version": "85.0.4183.83",
        "lessThan": "85.0.4183.83",
        "versionType": "custom"
      }
    ]
  }
]