CVE-2020-6407

CVSS 3.1: 8.8 high
EPSS: 2%p77
Published: Feb 27, 2020 · Feb 27, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-6407 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendors: google

Products: chrome

Weakness: CWE-787

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news

1 story

Install Latest Chrome Update to Patch 0

The Hacker NewsFeb 25, 11:47 UTC · Feb 25, 2020VulnerabilityExploitedCVE-2020-6418 CVE-2020-64072 · 1 read