Vulnerability CVE-2020-6402: Information

Description

Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Fixed packages

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

      ---

      Configuration 2

      cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*

      ---

      Configuration 3

      cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

      ---

      Configuration 4

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      ---

      Configuration 5

      cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*

      ---

      Configuration 6

      cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

      ---