Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-36765 EUVD-2020-24206GHSA-w9pj-xq5c-35w2

Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data vi…

Published Jul 16, 2024 · Updated Nov 6, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Debian

Description

Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Affected products

VendorProductAffectedFixed
Google Chrome 85.0.4183.83 – < 85.0.4183.83 85.0.4183.83

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 chromium 87.0.4280.88-0.1 —
Debian 13 chromium 87.0.4280.88-0.1 —
Debian 12 chromium 87.0.4280.88-0.1 —
Debian 10 chromium 87.0.4280.88-0.4~deb10u1 DSA-4824-1

Advisories 1

References