CVE-2020-6471

Critical

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to…

Chrome·CWE-276·Published 2020-05-21

CVSS

9.6

EPSS

0.01

KEV

Exploits

Vendor statements (7)

cve.orgen

235 chars

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

NVDes

299 chars

Una aplicación insuficiente de políticas en developer tools en Google Chrome versiones anteriores a 83.0.4103.61, permitió a un atacante que convenció a un usuario de que instalara una extensión maliciosa llevar a cabo potencialmente un escape del sandbox por medio de una Chrome Extension diseñada.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.6	2.8	6.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H