CVE-2020-6509
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who...
9.6 CriticalFix available
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.81%Up 0.4 points since Apr 14, 2021
What each source reports
NVD Score used
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
CVE-2020-6509- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
CVE-2020-6509- Updated
- 2026-11-02
EUVDEUVD-2020-27658 No score
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
EUVD-2020-27658- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv2p-68ph-w4mw
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who...
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
GHSA-jv2p-68ph-w4mw- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-6509
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
ALPINE-CVE-2020-6509- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
CVE-2020-6509- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2020-6509
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
DEBIAN-CVE-2020-6509- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2761
Red Hat Security Advisory: chromium-browser security update
- Record
RHSA-2020:2761- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-6509
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
UBUNTU-CVE-2020-6509- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0887-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 83.0.4103.116 boo#1173251:
- CVE-2020-6509: Use after free in extensions
- Add patch to work with new ffmpeg (bsc#1173292)
- Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107
- Disable wayland integration on openSUSE Leap 15.x (boo#1173187 boo#1173188 boo#1173254)
- Record
openSUSE-SU-2020:0887-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0893-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 83.0.4103.116 (boo#1173251):
- CVE-2020-6509: Use after free in extensions
Chromium was updated to 83.0.4103.106 (boo#1173029):
- CVE-2020-6505: Use after free in speech
- CVE-2020-6506: Insufficient policy enforcement in WebView
- CVE-2020-6507: Out of bounds write in V8
Other fixes:
- Add patch to work with new ffmpeg wrt boo#1173292:
- Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107
- Disable wayland integration on 15.x boo#1173187 boo#1173188 boo#1173254
- Enforce to not use system borders boo#1173063
- Record
openSUSE-SU-2020:0893-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0902-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 83.0.4103.116 boo#1173251:
- CVE-2020-6509: Use after free in extensions
- Add patch to work with new ffmpeg (bsc#1173292)
- Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107
- Disable wayland integration on openSUSE Leap 15.x (boo#1173187 boo#1173188 boo#1173254)
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2020:0902-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0949-1 No score
Security update for opera
This update for opera fixes the following issues:
- Update to version 69.0.3686.49
- CHR-7971 Update chromium on desktop-stable-83-3686 to 83.0.4103.116 (CVE-2020-6509)
- DNA-79195 Wrong date on history
- DNA-86090 Crash at views::View::ReorderChildView(views::View*, int)
- DNA-86122 [Mac] Some popovers have incorrectly themed arrow
- DNA-86833 Add hint to tell users that tab content is now searched
- DNA-86906 [Search in tabs] No matching results in your open tabs label not displayed for some strings not found.
- DNA-86983 Allow to search from the tile
- DNA-87029 Search in tabs dropdown should disappear when resizing window
- DNA-87051 No autocompletion in the address bar for Speed Dials
- DNA-87091 Do not vertically center search-in-tabs dialog
- DNA-87113 Crash at content::NavigationRequest::GetRenderFrameHost()
- DNA-87114 Double scrollbar in bookmarks popup
- DNA-87117 Hide “Provide additional details” button when crash is discarded by Socorro
- DNA-87122 Hide provide more information button from infobar when crash is discarded
- DNA-87153 The icons cover the inscription on the BABE picture title
- DNA-87203 The scroll view changes visible area unexpectedly
- DNA-87243 Provide missing translations
- DNA-87245 Extend schema and report search events
- DNA-87261 Allow to use search and modal at the same time
- DNA-87273 Switch to dedicated subdomain
- Complete Opera 69.0 changelog at: https://blogs.opera.com/desktop/changelog-for-69/
- Record
openSUSE-SU-2020:0949-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0950-1 No score
Security update for opera
This update for opera fixes the following issues:
- Update to version 69.0.3686.49
- CHR-7971 Update chromium on desktop-stable-83-3686 to 83.0.4103.116 (CVE-2020-6509)
- DNA-79195 Wrong date on history
- DNA-86090 Crash at views::View::ReorderChildView(views::View*, int)
- DNA-86122 [Mac] Some popovers have incorrectly themed arrow
- DNA-86833 Add hint to tell users that tab content is now searched
- DNA-86906 [Search in tabs] No matching results in your open tabs label not displayed for some strings not found.
- DNA-86983 Allow to search from the tile
- DNA-87029 Search in tabs dropdown should disappear when resizing window
- DNA-87051 No autocompletion in the address bar for Speed Dials
- DNA-87091 Do not vertically center search-in-tabs dialog
- DNA-87113 Crash at content::NavigationRequest::GetRenderFrameHost()
- DNA-87114 Double scrollbar in bookmarks popup
- DNA-87117 Hide “Provide additional details” button when crash is discarded by Socorro
- DNA-87122 Hide provide more information button from infobar when crash is discarded
- DNA-87153 The icons cover the inscription on the BABE picture title
- DNA-87203 The scroll view changes visible area unexpectedly
- DNA-87243 Provide missing translations
- DNA-87245 Extend schema and report search events
- DNA-87261 Allow to use search and modal at the same time
- DNA-87273 Switch to dedicated subdomain
- Complete Opera 69.0 changelog at: https://blogs.opera.com/desktop/changelog-for-69/
- Record
openSUSE-SU-2020:0950-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1032-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 83.0.4103.116 boo#1173251:
- CVE-2020-6509: Use after free in extensions
- Add patch to work with new ffmpeg (bsc#1173292)
- Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107
- Disable wayland integration on openSUSE Leap 15.x (boo#1173187 boo#1173188 boo#1173254)
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2020:1032-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumAlpine:v3.12 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.13 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.14 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.15 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.16 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.17 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.18 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.19 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.20 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.21 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
Show 19 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumAlpine:v3.22 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.23 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumAlpine:v3.24 |
before 83.0.4103.116-r0 | 83.0.4103.116-r0 |
chromiumDebian:12 |
before 83.0.4103.116-1 | 83.0.4103.116-1 |
chromiumDebian:13 |
before 83.0.4103.116-1 | 83.0.4103.116-1 |
chromiumDebian:14 |
before 83.0.4103.116-1 | 83.0.4103.116-1 |
chromiumDebian:10 From an advisory covering 69 CVEs |
before 83.0.4103.116-1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 30 moreShow less76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.83-1 |
83.0.4103.116-1~deb10u1 |
chromium-browserRed Hat:rhel_extras:6 |
before 0:83.0.4103.116-1.el6_10 | 0:83.0.4103.116-1.el6_10 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 |
before 0:83.0.4103.116-1.el6_10 | 0:83.0.4103.116-1.el6_10 |
chromium-browserUbuntu:16.04:LTS |
before 84.0.4147.105-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
84.0.4147.105-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 84.0.4147.105-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 38 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.1 |
84.0.4147.105-0ubuntu0.18.04.1 |
chromiumopenSUSE:Leap 15.1 |
before 83.0.4103.116-lp151.2.106.1 | 83.0.4103.116-lp151.2.106.1 |
chromiumopenSUSE:Leap 15.2 From an advisory covering 4 CVEs |
before 83.0.4103.116-lp152.2.3.1 | 83.0.4103.116-lp152.2.3.1 |
chromiumSUSE:Package Hub 15 SP1 |
before 83.0.4103.116-bp151.3.91.1 | 83.0.4103.116-bp151.3.91.1 |
operaopenSUSE:Leap 15.1 NonFree |
before 69.0.3686.49-lp151.2.21.1 | 69.0.3686.49-lp151.2.21.1 |
operaopenSUSE:Leap 15.2 NonFree |
before 69.0.3686.49-lp152.2.9.1 | 69.0.3686.49-lp152.2.9.1 |
chromiumSUSE:Package Hub 15 SP2 |
before 83.0.4103.116-bp152.2.3.1 | 83.0.4103.116-bp152.2.3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-6509 is a critical vulnerability (CVSS 9.6) in Google Chrome, published June 27, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in chromium 83.0.4103.116-r0.
References
crbug.com/1092308
chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_22.html
security.gentoo.org/glsa/202007-08
lists.opensuse.org/opensuse-security-announce/2020-09/msg00040.html
nvd.nist.gov/vuln/detail/CVE-2020-6509
github.com/advisories/GHSA-jv2p-68ph-w4mw
Show 194 moreShow less
security.alpinelinux.org/vuln/CVE-2020-6509
security-tracker.debian.org/tracker/CVE-2020-6509
access.redhat.com/errata/RHSA-2020:2761
bugzilla.redhat.com/show_bug.cgi?id=1849947
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2761.json
cve.org/CVERecord?id=CVE-2020-6509
ubuntu.com/security/CVE-2020-6509
bugzilla.suse.com/1173107
suse.com/security/cve/CVE-2020-6509
This page doesn't list everything
Left out here: 13 versions and 2,139 references. The JSON record has them.