Skip to content
OpenAdvisories
Unscored CVE-2020-6380 EUVD-2020-27530GHSA-vhfr-653c-g79j

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the ren…

Published Feb 11, 2020 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 79.0.3945.130 79.0.3945.130

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 79.0.3945.130-1 —
Debian 13 chromium 79.0.3945.130-1 —
Debian 12 chromium 79.0.3945.130-1 —
Debian 10 chromium 79.0.3945.130-1~deb10u1 DSA-4606-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 79.0.3945.130-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 79.0.3945.130-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 chromium-browser 79.0.3945.130-1.el6_10 RHSA-2020:0214
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP1 chromium 79.0.3945.130-bp151.3.56.3 openSUSE-SU-2020:0093-1
SUSE Package Hub 12 SP3 chromium 79.0.3945.130-bp151.3.56.3 openSUSE-SU-2020:0093-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.1 chromium 79.0.3945.130-bp151.3.56.3 openSUSE-SU-2020:0093-1

Advisories 5

References