CVE-2020-6567

—

CVSS 3.1

6.5 medium

EPSS

2%p73

Published

Sep 21, 2020 (Sep 21, 2020)

Modified

Jun 17, 2026

Description

Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Vendors: google opensuse debian fedoraproject
Products: chrome, backports sle, debian linux, fedora, leap
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.