CVE-2020-6472
CVE-2020-6472
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.
CVSS 6.5 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
chrome
- Versions
- ≥ unspecified, < 83.0.4103.61: Affected (custom)
Update to 83.0.4103.61
chromium Debian:12
- Affected ranges
- ECOSYSTEM: < 83.0.4103.83-1
Update to 83.0.4103.83-1
chromium Debian:13
- Affected ranges
- ECOSYSTEM: < 83.0.4103.83-1
Update to 83.0.4103.83-1
chromium Debian:14
- Affected ranges
- ECOSYSTEM: < 83.0.4103.83-1
Update to 83.0.4103.83-1
chromium-browser Ubuntu:16.04:LTS
- Versions
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- 48.0.2564.82-0ubuntu1.1222
- 48.0.2564.116-0ubuntu1.1229
- 49.0.2623.87-0ubuntu1.1232
- 49.0.2623.108-0ubuntu1.1233
- 50.0.2661.102-0ubuntu0.16.04.1.1237
- 51.0.2704.79-0ubuntu0.16.04.1.1242
- 52.0.2743.116-0ubuntu0.16.04.1.1250
- 53.0.2785.143-0ubuntu0.16.04.1.1254
- 53.0.2785.143-0ubuntu0.16.04.1.1257
- 55.0.2883.87-0ubuntu0.16.04.1263
- 56.0.2924.76-0ubuntu0.16.04.1268
- 57.0.2987.98-0ubuntu0.16.04.1276
- 58.0.3029.81-0ubuntu0.16.04.1277
- 58.0.3029.96-0ubuntu0.16.04.1279
- 58.0.3029.110-0ubuntu0.16.04.1281
- 59.0.3071.109-0ubuntu0.16.04.1289
- 59.0.3071.109-0ubuntu0.16.04.1291
- 60.0.3112.78-0ubuntu0.16.04.1293
- 60.0.3112.113-0ubuntu0.16.04.1298
- 61.0.3163.79-0ubuntu0.16.04.1300
- 61.0.3163.100-0ubuntu0.16.04.1306
- 62.0.3202.62-0ubuntu0.16.04.1308
- 62.0.3202.75-0ubuntu0.16.04.1313
- 62.0.3202.89-0ubuntu0.16.04.1315
- 62.0.3202.94-0ubuntu0.16.04.1317
- 63.0.3239.84-0ubuntu0.16.04.1
- 63.0.3239.132-0ubuntu0.16.04.1
- 64.0.3282.119-0ubuntu0.16.04.1
- 64.0.3282.140-0ubuntu0.16.04.1
- 64.0.3282.167-0ubuntu0.16.04.1
- 65.0.3325.181-0ubuntu0.16.04.1
- 66.0.3359.139-0ubuntu0.16.04.3
- 66.0.3359.181-0ubuntu0.16.04.1
- 67.0.3396.99-0ubuntu0.16.04.2
- 68.0.3440.75-0ubuntu0.16.04.1
- 68.0.3440.106-0ubuntu0.16.04.1
- 69.0.3497.81-0ubuntu0.16.04.1
- 70.0.3538.67-0ubuntu0.16.04.1
- 70.0.3538.77-0ubuntu0.16.04.1
- 70.0.3538.110-0ubuntu0.16.04.1
- 71.0.3578.80-0ubuntu0.16.04.1
- 71.0.3578.98-0ubuntu0.16.04.1
- 72.0.3626.119-0ubuntu0.16.04.1
- 72.0.3626.121-0ubuntu0.16.04.1
- 73.0.3683.75-0ubuntu0.16.04.1
- 73.0.3683.86-0ubuntu0.16.04.1
- 74.0.3729.169-0ubuntu0.16.04.1
- 76.0.3809.87-0ubuntu0.16.04.1
- 76.0.3809.100-0ubuntu0.16.04.1
- 77.0.3865.90-0ubuntu0.16.04.1
- 78.0.3904.70-0ubuntu0.16.04.2
- 78.0.3904.97-0ubuntu0.16.04.1
- 78.0.3904.108-0ubuntu0.16.04.1
- 79.0.3945.79-0ubuntu0.16.04.1
- 79.0.3945.130-0ubuntu0.16.04.1
- 80.0.3987.87-0ubuntu0.16.04.1
- 80.0.3987.149-0ubuntu0.16.04.1
- 80.0.3987.163-0ubuntu0.16.04.1
- 81.0.4044.122-0ubuntu0.16.04.1
- 81.0.4044.138-0ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: < 84.0.4147.105-0ubuntu0.16.04.1
Update to 84.0.4147.105-0ubuntu0.16.04.1
chromium-browser Ubuntu:18.04:LTS
- Versions
- 61.0.3163.100-0ubuntu1.1378
- 62.0.3202.62-0ubuntu0.17.10.1380
- 62.0.3202.89-0ubuntu1.1386
- 62.0.3202.94-0ubuntu1.1388
- 63.0.3239.84-0ubuntu1
- 63.0.3239.108-0ubuntu1
- 64.0.3282.119-0ubuntu1
- 64.0.3282.140-0ubuntu1
- 64.0.3282.167-0ubuntu1
- 65.0.3325.146-0ubuntu1
- 65.0.3325.181-0ubuntu1
- 66.0.3359.139-0ubuntu0.18.04.3
- 66.0.3359.181-0ubuntu0.18.04.1
- 67.0.3396.99-0ubuntu0.18.04.1
- 68.0.3440.75-0ubuntu0.18.04.1
- 68.0.3440.106-0ubuntu0.18.04.1
- 69.0.3497.81-0ubuntu0.18.04.1
- 70.0.3538.67-0ubuntu0.18.04.1
- 70.0.3538.77-0ubuntu0.18.04.1
- 70.0.3538.110-0ubuntu0.18.04.1
- 71.0.3578.80-0ubuntu0.18.04.1
- 71.0.3578.98-0ubuntu0.18.04.1
- 72.0.3626.119-0ubuntu0.18.04.1
- 72.0.3626.121-0ubuntu0.18.04.1
- 73.0.3683.75-0ubuntu0.18.04.1
- 73.0.3683.86-0ubuntu0.18.04.1
- 74.0.3729.169-0ubuntu0.18.04.1
- 75.0.3770.90-0ubuntu0.18.04.1
- 75.0.3770.142-0ubuntu0.18.04.1
- 76.0.3809.87-0ubuntu0.18.04.1
- 76.0.3809.100-0ubuntu0.18.04.1
- 77.0.3865.90-0ubuntu0.18.04.1
- 78.0.3904.70-0ubuntu0.18.04.2
- 78.0.3904.97-0ubuntu0.18.04.1
- 78.0.3904.108-0ubuntu0.18.04.1
- 79.0.3945.79-0ubuntu0.18.04.1
- 79.0.3945.130-0ubuntu0.18.04.1
- 80.0.3987.87-0ubuntu0.18.04.1
- 80.0.3987.149-0ubuntu0.18.04.1
- 80.0.3987.163-0ubuntu0.18.04.1
- 81.0.4044.122-0ubuntu0.18.04.1
- 81.0.4044.138-0ubuntu0.18.04.1
- Affected ranges
- ECOSYSTEM: < 83.0.4103.61-0ubuntu0.18.04.1
Update to 83.0.4103.61-0ubuntu0.18.04.1
Original sources
- https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html
- https://crbug.com/1064519
- https://security.gentoo.org/glsa/202006-02
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/
- https://www.debian.org/security/2020/dsa-4714
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/
- https://security.gentoo.org/glsa/202101-30
- https://nvd.nist.gov/vuln/detail/CVE-2020-6472