CVE-2020-15963 PUBLISHED

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

EPSS 1.35% · 80.0th percentile

Risk Scores

EPSS Score
1.35%
80.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSchromium-browser0, 61.0.3163.100-0ubuntu1.1378, 62.0.3202.62-0ubuntu0.17.10.1380
Ubuntu:16.04:LTSchromium-browser72.0.3626.119-0ubuntu0.16.04.1, 72.0.3626.121-0ubuntu0.16.04.1, 73.0.3683.75-0ubuntu0.16.04.1

Timeline

References

Open in Interactive Console →