p PatchFirst

CVE-2020-6425

CVE-2020-6425

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.

CVSS 5.4 · Medium · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ unspecified, < 80.0.3987.149: Affected (custom)

    Update to 80.0.3987.149

  • chromium Debian:12

    Affected ranges
    • ECOSYSTEM: < 80.0.3987.149-1

    Update to 80.0.3987.149-1

  • chromium Debian:13

    Affected ranges
    • ECOSYSTEM: < 80.0.3987.149-1

    Update to 80.0.3987.149-1

  • chromium Debian:14

    Affected ranges
    • ECOSYSTEM: < 80.0.3987.149-1

    Update to 80.0.3987.149-1

  • chromium-browser Ubuntu:16.04:LTS

    Versions
    • 45.0.2454.101-0ubuntu1.1201
    • 47.0.2526.73-0ubuntu1.1218
    • 47.0.2526.106-0ubuntu1.1221
    • 48.0.2564.82-0ubuntu1.1222
    • 48.0.2564.116-0ubuntu1.1229
    • 49.0.2623.87-0ubuntu1.1232
    • 49.0.2623.108-0ubuntu1.1233
    • 50.0.2661.102-0ubuntu0.16.04.1.1237
    • 51.0.2704.79-0ubuntu0.16.04.1.1242
    • 52.0.2743.116-0ubuntu0.16.04.1.1250
    • 53.0.2785.143-0ubuntu0.16.04.1.1254
    • 53.0.2785.143-0ubuntu0.16.04.1.1257
    • 55.0.2883.87-0ubuntu0.16.04.1263
    • 56.0.2924.76-0ubuntu0.16.04.1268
    • 57.0.2987.98-0ubuntu0.16.04.1276
    • 58.0.3029.81-0ubuntu0.16.04.1277
    • 58.0.3029.96-0ubuntu0.16.04.1279
    • 58.0.3029.110-0ubuntu0.16.04.1281
    • 59.0.3071.109-0ubuntu0.16.04.1289
    • 59.0.3071.109-0ubuntu0.16.04.1291
    • 60.0.3112.78-0ubuntu0.16.04.1293
    • 60.0.3112.113-0ubuntu0.16.04.1298
    • 61.0.3163.79-0ubuntu0.16.04.1300
    • 61.0.3163.100-0ubuntu0.16.04.1306
    • 62.0.3202.62-0ubuntu0.16.04.1308
    • 62.0.3202.75-0ubuntu0.16.04.1313
    • 62.0.3202.89-0ubuntu0.16.04.1315
    • 62.0.3202.94-0ubuntu0.16.04.1317
    • 63.0.3239.84-0ubuntu0.16.04.1
    • 63.0.3239.132-0ubuntu0.16.04.1
    • 64.0.3282.119-0ubuntu0.16.04.1
    • 64.0.3282.140-0ubuntu0.16.04.1
    • 64.0.3282.167-0ubuntu0.16.04.1
    • 65.0.3325.181-0ubuntu0.16.04.1
    • 66.0.3359.139-0ubuntu0.16.04.3
    • 66.0.3359.181-0ubuntu0.16.04.1
    • 67.0.3396.99-0ubuntu0.16.04.2
    • 68.0.3440.75-0ubuntu0.16.04.1
    • 68.0.3440.106-0ubuntu0.16.04.1
    • 69.0.3497.81-0ubuntu0.16.04.1
    • 70.0.3538.67-0ubuntu0.16.04.1
    • 70.0.3538.77-0ubuntu0.16.04.1
    • 70.0.3538.110-0ubuntu0.16.04.1
    • 71.0.3578.80-0ubuntu0.16.04.1
    • 71.0.3578.98-0ubuntu0.16.04.1
    • 72.0.3626.119-0ubuntu0.16.04.1
    • 72.0.3626.121-0ubuntu0.16.04.1
    • 73.0.3683.75-0ubuntu0.16.04.1
    • 73.0.3683.86-0ubuntu0.16.04.1
    • 74.0.3729.169-0ubuntu0.16.04.1
    • 76.0.3809.87-0ubuntu0.16.04.1
    • 76.0.3809.100-0ubuntu0.16.04.1
    • 77.0.3865.90-0ubuntu0.16.04.1
    • 78.0.3904.70-0ubuntu0.16.04.2
    • 78.0.3904.97-0ubuntu0.16.04.1
    • 78.0.3904.108-0ubuntu0.16.04.1
    • 79.0.3945.79-0ubuntu0.16.04.1
    • 79.0.3945.130-0ubuntu0.16.04.1
    • 80.0.3987.87-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 80.0.3987.149-0ubuntu0.16.04.1

    Update to 80.0.3987.149-0ubuntu0.16.04.1

  • chromium-browser Ubuntu:18.04:LTS

    Versions
    • 61.0.3163.100-0ubuntu1.1378
    • 62.0.3202.62-0ubuntu0.17.10.1380
    • 62.0.3202.89-0ubuntu1.1386
    • 62.0.3202.94-0ubuntu1.1388
    • 63.0.3239.84-0ubuntu1
    • 63.0.3239.108-0ubuntu1
    • 64.0.3282.119-0ubuntu1
    • 64.0.3282.140-0ubuntu1
    • 64.0.3282.167-0ubuntu1
    • 65.0.3325.146-0ubuntu1
    • 65.0.3325.181-0ubuntu1
    • 66.0.3359.139-0ubuntu0.18.04.3
    • 66.0.3359.181-0ubuntu0.18.04.1
    • 67.0.3396.99-0ubuntu0.18.04.1
    • 68.0.3440.75-0ubuntu0.18.04.1
    • 68.0.3440.106-0ubuntu0.18.04.1
    • 69.0.3497.81-0ubuntu0.18.04.1
    • 70.0.3538.67-0ubuntu0.18.04.1
    • 70.0.3538.77-0ubuntu0.18.04.1
    • 70.0.3538.110-0ubuntu0.18.04.1
    • 71.0.3578.80-0ubuntu0.18.04.1
    • 71.0.3578.98-0ubuntu0.18.04.1
    • 72.0.3626.119-0ubuntu0.18.04.1
    • 72.0.3626.121-0ubuntu0.18.04.1
    • 73.0.3683.75-0ubuntu0.18.04.1
    • 73.0.3683.86-0ubuntu0.18.04.1
    • 74.0.3729.169-0ubuntu0.18.04.1
    • 75.0.3770.90-0ubuntu0.18.04.1
    • 75.0.3770.142-0ubuntu0.18.04.1
    • 76.0.3809.87-0ubuntu0.18.04.1
    • 76.0.3809.100-0ubuntu0.18.04.1
    • 77.0.3865.90-0ubuntu0.18.04.1
    • 78.0.3904.70-0ubuntu0.18.04.2
    • 78.0.3904.97-0ubuntu0.18.04.1
    • 78.0.3904.108-0ubuntu0.18.04.1
    • 79.0.3945.79-0ubuntu0.18.04.1
    • 79.0.3945.130-0ubuntu0.18.04.1
    • 80.0.3987.87-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 80.0.3987.149-0ubuntu0.18.04.1

    Update to 80.0.3987.149-0ubuntu0.18.04.1

Original sources

Check your server →