p PatchFirst

CVE-2020-15973

CVE-2020-15973

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.

CVSS 6.5 · Medium · EPSS 1.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ unspecified, < 86.0.4240.75: Affected (custom)

    Update to 86.0.4240.75

  • chromium Debian:12

    Affected ranges
    • ECOSYSTEM: < 87.0.4280.88-0.1

    Update to 87.0.4280.88-0.1

  • chromium Debian:13

    Affected ranges
    • ECOSYSTEM: < 87.0.4280.88-0.1

    Update to 87.0.4280.88-0.1

  • chromium Debian:14

    Affected ranges
    • ECOSYSTEM: < 87.0.4280.88-0.1

    Update to 87.0.4280.88-0.1

  • chromium-browser Ubuntu:16.04:LTS

    Versions
    • 45.0.2454.101-0ubuntu1.1201
    • 47.0.2526.73-0ubuntu1.1218
    • 47.0.2526.106-0ubuntu1.1221
    • 48.0.2564.82-0ubuntu1.1222
    • 48.0.2564.116-0ubuntu1.1229
    • 49.0.2623.87-0ubuntu1.1232
    • 49.0.2623.108-0ubuntu1.1233
    • 50.0.2661.102-0ubuntu0.16.04.1.1237
    • 51.0.2704.79-0ubuntu0.16.04.1.1242
    • 52.0.2743.116-0ubuntu0.16.04.1.1250
    • 53.0.2785.143-0ubuntu0.16.04.1.1254
    • 53.0.2785.143-0ubuntu0.16.04.1.1257
    • 55.0.2883.87-0ubuntu0.16.04.1263
    • 56.0.2924.76-0ubuntu0.16.04.1268
    • 57.0.2987.98-0ubuntu0.16.04.1276
    • 58.0.3029.81-0ubuntu0.16.04.1277
    • 58.0.3029.96-0ubuntu0.16.04.1279
    • 58.0.3029.110-0ubuntu0.16.04.1281
    • 59.0.3071.109-0ubuntu0.16.04.1289
    • 59.0.3071.109-0ubuntu0.16.04.1291
    • 60.0.3112.78-0ubuntu0.16.04.1293
    • 60.0.3112.113-0ubuntu0.16.04.1298
    • 61.0.3163.79-0ubuntu0.16.04.1300
    • 61.0.3163.100-0ubuntu0.16.04.1306
    • 62.0.3202.62-0ubuntu0.16.04.1308
    • 62.0.3202.75-0ubuntu0.16.04.1313
    • 62.0.3202.89-0ubuntu0.16.04.1315
    • 62.0.3202.94-0ubuntu0.16.04.1317
    • 63.0.3239.84-0ubuntu0.16.04.1
    • 63.0.3239.132-0ubuntu0.16.04.1
    • 64.0.3282.119-0ubuntu0.16.04.1
    • 64.0.3282.140-0ubuntu0.16.04.1
    • 64.0.3282.167-0ubuntu0.16.04.1
    • 65.0.3325.181-0ubuntu0.16.04.1
    • 66.0.3359.139-0ubuntu0.16.04.3
    • 66.0.3359.181-0ubuntu0.16.04.1
    • 67.0.3396.99-0ubuntu0.16.04.2
    • 68.0.3440.75-0ubuntu0.16.04.1
    • 68.0.3440.106-0ubuntu0.16.04.1
    • 69.0.3497.81-0ubuntu0.16.04.1
    • 70.0.3538.67-0ubuntu0.16.04.1
    • 70.0.3538.77-0ubuntu0.16.04.1
    • 70.0.3538.110-0ubuntu0.16.04.1
    • 71.0.3578.80-0ubuntu0.16.04.1
    • 71.0.3578.98-0ubuntu0.16.04.1
    • 72.0.3626.119-0ubuntu0.16.04.1
    • 72.0.3626.121-0ubuntu0.16.04.1
    • 73.0.3683.75-0ubuntu0.16.04.1
    • 73.0.3683.86-0ubuntu0.16.04.1
    • 74.0.3729.169-0ubuntu0.16.04.1
    • 76.0.3809.87-0ubuntu0.16.04.1
    • 76.0.3809.100-0ubuntu0.16.04.1
    • 77.0.3865.90-0ubuntu0.16.04.1
    • 78.0.3904.70-0ubuntu0.16.04.2
    • 78.0.3904.97-0ubuntu0.16.04.1
    • 78.0.3904.108-0ubuntu0.16.04.1
    • 79.0.3945.79-0ubuntu0.16.04.1
    • 79.0.3945.130-0ubuntu0.16.04.1
    • 80.0.3987.87-0ubuntu0.16.04.1
    • 80.0.3987.149-0ubuntu0.16.04.1
    • 80.0.3987.163-0ubuntu0.16.04.1
    • 81.0.4044.122-0ubuntu0.16.04.1
    • 81.0.4044.138-0ubuntu0.16.04.1
    • 84.0.4147.105-0ubuntu0.16.04.1
    • 85.0.4183.83-0ubuntu0.16.04.2
    • 85.0.4183.121-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 86.0.4240.75-0ubuntu0.16.04.1

    Update to 86.0.4240.75-0ubuntu0.16.04.1

  • chromium-browser Ubuntu:18.04:LTS

    Versions
    • 61.0.3163.100-0ubuntu1.1378
    • 62.0.3202.62-0ubuntu0.17.10.1380
    • 62.0.3202.89-0ubuntu1.1386
    • 62.0.3202.94-0ubuntu1.1388
    • 63.0.3239.84-0ubuntu1
    • 63.0.3239.108-0ubuntu1
    • 64.0.3282.119-0ubuntu1
    • 64.0.3282.140-0ubuntu1
    • 64.0.3282.167-0ubuntu1
    • 65.0.3325.146-0ubuntu1
    • 65.0.3325.181-0ubuntu1
    • 66.0.3359.139-0ubuntu0.18.04.3
    • 66.0.3359.181-0ubuntu0.18.04.1
    • 67.0.3396.99-0ubuntu0.18.04.1
    • 68.0.3440.75-0ubuntu0.18.04.1
    • 68.0.3440.106-0ubuntu0.18.04.1
    • 69.0.3497.81-0ubuntu0.18.04.1
    • 70.0.3538.67-0ubuntu0.18.04.1
    • 70.0.3538.77-0ubuntu0.18.04.1
    • 70.0.3538.110-0ubuntu0.18.04.1
    • 71.0.3578.80-0ubuntu0.18.04.1
    • 71.0.3578.98-0ubuntu0.18.04.1
    • 72.0.3626.119-0ubuntu0.18.04.1
    • 72.0.3626.121-0ubuntu0.18.04.1
    • 73.0.3683.75-0ubuntu0.18.04.1
    • 73.0.3683.86-0ubuntu0.18.04.1
    • 74.0.3729.169-0ubuntu0.18.04.1
    • 75.0.3770.90-0ubuntu0.18.04.1
    • 75.0.3770.142-0ubuntu0.18.04.1
    • 76.0.3809.87-0ubuntu0.18.04.1
    • 76.0.3809.100-0ubuntu0.18.04.1
    • 77.0.3865.90-0ubuntu0.18.04.1
    • 78.0.3904.70-0ubuntu0.18.04.2
    • 78.0.3904.97-0ubuntu0.18.04.1
    • 78.0.3904.108-0ubuntu0.18.04.1
    • 79.0.3945.79-0ubuntu0.18.04.1
    • 79.0.3945.130-0ubuntu0.18.04.1
    • 80.0.3987.87-0ubuntu0.18.04.1
    • 80.0.3987.149-0ubuntu0.18.04.1
    • 80.0.3987.163-0ubuntu0.18.04.1
    • 81.0.4044.122-0ubuntu0.18.04.1
    • 81.0.4044.138-0ubuntu0.18.04.1
    • 83.0.4103.61-0ubuntu0.18.04.1
    • 84.0.4147.105-0ubuntu0.18.04.1
    • 85.0.4183.83-0ubuntu0.18.04.2
    • 85.0.4183.121-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 86.0.4240.75-0ubuntu0.18.04.1

    Update to 86.0.4240.75-0ubuntu0.18.04.1

Original sources

Check your server →