CVE-2020-6442

Description

Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

1.095

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (81.0.4044.92)	Windows
Multiple vulnerabilities fixed in Google Chrome (81.0.4044.92)	Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (81.0.416.53)	Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (81.0.416.53)	Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac (81.0.4044.92)	Mac
(RHSA-2020:1487) chromium-browser security update chromium-browser-81.0.4044.92-2.el6_10.i686.rpm	Linux
(RHSA-2020:1487) chromium-browser security update chromium-browser-81.0.4044.92-2.el6_10.x86_64.rpm	Linux
chromium security update(DSA-4714-1) chromium_83.0.4103.116-1~deb10u1_amd64.deb	Linux
Multiple vulnerabilities fixed in Google Chrome (81.0.4044.92) (For Debian)	Linux
Multiple vulnerabilities fixed in Google Chrome (81.0.4044.92) (For Centos)	Linux
Multiple vulnerabilities fixed in Google Chrome (81.0.4044.92) (For RedHat)	Linux
Multiple vulnerabilities fixed in Google Chrome (81.0.4044.92) (For Suse)	Linux
Multiple vulnerabilities fixed in Google Chrome (81.0.4044.92) (For Ubuntu)	Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-313692	Google Chrome (x64) (81.0.4044.92)
PATCH-313691	Google Chrome (81.0.4044.92)
PATCH-109332	Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-109333	Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-609673	Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234