CVE-2020-6566

Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

History

21 Nov 2024, 05:35

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - Mailing List, Patch, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - Mailing List, Patch, Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - Third Party Advisory
References () https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html - Release Notes, Vendor Advisory () https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html - Release Notes, Vendor Advisory
References () https://crbug.com/1065264 - Permissions Required, Vendor Advisory () https://crbug.com/1065264 - Permissions Required, Vendor Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/ -
References () https://www.debian.org/security/2021/dsa-4824 - Third Party Advisory () https://www.debian.org/security/2021/dsa-4824 - Third Party Advisory

07 Nov 2023, 03:24

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/', 'name': 'FEDORA-2020-6da740d38c', 'tags': ['Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/ -

Information

Published : 2020-09-21 20:15

Updated : 2024-11-21 05:35


NVD link : CVE-2020-6566

Mitre link : CVE-2020-6566

CVE.ORG link : CVE-2020-6566


JSON object : View

Products Affected

opensuse

  • leap
  • backports_sle

debian

  • debian_linux

google

  • chrome

fedoraproject

  • fedora