Every CVE Search/ Get API key

CVE-2020-6528

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a...

4.3 MediumFix available

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

1.50%Up 1.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 4.3

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
CVE-2020-6528
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
CVE-2020-6528
Updated
2026-11-02
EUVDEUVD-2020-27677 No score

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
EUVD-2020-27677
Updated
2026-11-03
GitHub AdvisoriesGHSA-hf38-9jxh-8cg7 No score

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a...

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
GHSA-hf38-9jxh-8cg7
Weakness
CWE-863
Updated
2026-11-02
OSV 4.3

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
CVE-2020-6528
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-6528 4.3

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
DEBIAN-CVE-2020-6528
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2020:3377 9.6

Red Hat Security Advisory: chromium-browser security update

Record
RHSA-2020:3377
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-6528 4.3

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Record
UBUNTU-CVE-2020-6528
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2020:1020-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 84.0.4147.89 boo#1174189:
    • Critical CVE-2020-6510: Heap buffer overflow in background fetch.
    • High CVE-2020-6511: Side-channel information leakage in content security policy.
    • High CVE-2020-6512: Type Confusion in V8.
    • High CVE-2020-6513: Heap buffer overflow in PDFium.
    • High CVE-2020-6514: Inappropriate implementation in WebRTC.
    • High CVE-2020-6515: Use after free in tab strip.
    • High CVE-2020-6516: Policy bypass in CORS.
    • High CVE-2020-6517: Heap buffer overflow in history.
    • Medium CVE-2020-6518: Use after free in developer tools.
    • Medium CVE-2020-6519: Policy bypass in CSP.
    • Medium CVE-2020-6520: Heap buffer overflow in Skia.
    • Medium CVE-2020-6521: Side-channel information leakage in autofill.
    • Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
    • Medium CVE-2020-6523: Out of bounds write in Skia.
    • Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
    • Medium CVE-2020-6525: Heap buffer overflow in Skia.
    • Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
    • Low CVE-2020-6527: Insufficient policy enforcement in CSP.
    • Low CVE-2020-6528: Incorrect security UI in basic auth.
    • Low CVE-2020-6529: Inappropriate implementation in WebRTC.
    • Low CVE-2020-6530: Out of bounds memory access in developer tools.
    • Low CVE-2020-6531: Side-channel information leakage in scroll to text.
    • Low CVE-2020-6533: Type Confusion in V8.
    • Low CVE-2020-6534: Heap buffer overflow in WebRTC.
    • Low CVE-2020-6535: Insufficient data validation in WebUI.
    • Low CVE-2020-6536: Incorrect security UI in PWAs.
  • Use bundled xcb-proto as we need to generate py2 bindings
  • Try to fix non-wayland build for Leap builds
Record
openSUSE-SU-2020:1020-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1021-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 84.0.4147.89 boo#1174189:
    • Critical CVE-2020-6510: Heap buffer overflow in background fetch.
    • High CVE-2020-6511: Side-channel information leakage in content security policy.
    • High CVE-2020-6512: Type Confusion in V8.
    • High CVE-2020-6513: Heap buffer overflow in PDFium.
    • High CVE-2020-6514: Inappropriate implementation in WebRTC.
    • High CVE-2020-6515: Use after free in tab strip.
    • High CVE-2020-6516: Policy bypass in CORS.
    • High CVE-2020-6517: Heap buffer overflow in history.
    • Medium CVE-2020-6518: Use after free in developer tools.
    • Medium CVE-2020-6519: Policy bypass in CSP.
    • Medium CVE-2020-6520: Heap buffer overflow in Skia.
    • Medium CVE-2020-6521: Side-channel information leakage in autofill.
    • Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
    • Medium CVE-2020-6523: Out of bounds write in Skia.
    • Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
    • Medium CVE-2020-6525: Heap buffer overflow in Skia.
    • Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
    • Low CVE-2020-6527: Insufficient policy enforcement in CSP.
    • Low CVE-2020-6528: Incorrect security UI in basic auth.
    • Low CVE-2020-6529: Inappropriate implementation in WebRTC.
    • Low CVE-2020-6530: Out of bounds memory access in developer tools.
    • Low CVE-2020-6531: Side-channel information leakage in scroll to text.
    • Low CVE-2020-6533: Type Confusion in V8.
    • Low CVE-2020-6534: Heap buffer overflow in WebRTC.
    • Low CVE-2020-6535: Insufficient data validation in WebUI.
    • Low CVE-2020-6536: Incorrect security UI in PWAs.
  • Use bundled xcb-proto as we need to generate py2 bindings
  • Try to fix non-wayland build for Leap builds
Record
openSUSE-SU-2020:1021-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1048-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 84.0.4147.89 boo#1174189:
    • Critical CVE-2020-6510: Heap buffer overflow in background fetch.
    • High CVE-2020-6511: Side-channel information leakage in content security policy.
    • High CVE-2020-6512: Type Confusion in V8.
    • High CVE-2020-6513: Heap buffer overflow in PDFium.
    • High CVE-2020-6514: Inappropriate implementation in WebRTC.
    • High CVE-2020-6515: Use after free in tab strip.
    • High CVE-2020-6516: Policy bypass in CORS.
    • High CVE-2020-6517: Heap buffer overflow in history.
    • Medium CVE-2020-6518: Use after free in developer tools.
    • Medium CVE-2020-6519: Policy bypass in CSP.
    • Medium CVE-2020-6520: Heap buffer overflow in Skia.
    • Medium CVE-2020-6521: Side-channel information leakage in autofill.
    • Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
    • Medium CVE-2020-6523: Out of bounds write in Skia.
    • Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
    • Medium CVE-2020-6525: Heap buffer overflow in Skia.
    • Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
    • Low CVE-2020-6527: Insufficient policy enforcement in CSP.
    • Low CVE-2020-6528: Incorrect security UI in basic auth.
    • Low CVE-2020-6529: Inappropriate implementation in WebRTC.
    • Low CVE-2020-6530: Out of bounds memory access in developer tools.
    • Low CVE-2020-6531: Side-channel information leakage in scroll to text.
    • Low CVE-2020-6533: Type Confusion in V8.
    • Low CVE-2020-6534: Heap buffer overflow in WebRTC.
    • Low CVE-2020-6535: Insufficient data validation in WebUI.
    • Low CVE-2020-6536: Incorrect security UI in PWAs.
  • Use bundled xcb-proto as we need to generate py2 bindings
  • Try to fix non-wayland build for Leap builds

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2020:1048-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1061-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 84.0.4147.89 boo#1174189:
    • Critical CVE-2020-6510: Heap buffer overflow in background fetch.
    • High CVE-2020-6511: Side-channel information leakage in content security policy.
    • High CVE-2020-6512: Type Confusion in V8.
    • High CVE-2020-6513: Heap buffer overflow in PDFium.
    • High CVE-2020-6514: Inappropriate implementation in WebRTC.
    • High CVE-2020-6515: Use after free in tab strip.
    • High CVE-2020-6516: Policy bypass in CORS.
    • High CVE-2020-6517: Heap buffer overflow in history.
    • Medium CVE-2020-6518: Use after free in developer tools.
    • Medium CVE-2020-6519: Policy bypass in CSP.
    • Medium CVE-2020-6520: Heap buffer overflow in Skia.
    • Medium CVE-2020-6521: Side-channel information leakage in autofill.
    • Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
    • Medium CVE-2020-6523: Out of bounds write in Skia.
    • Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
    • Medium CVE-2020-6525: Heap buffer overflow in Skia.
    • Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
    • Low CVE-2020-6527: Insufficient policy enforcement in CSP.
    • Low CVE-2020-6528: Incorrect security UI in basic auth.
    • Low CVE-2020-6529: Inappropriate implementation in WebRTC.
    • Low CVE-2020-6530: Out of bounds memory access in developer tools.
    • Low CVE-2020-6531: Side-channel information leakage in scroll to text.
    • Low CVE-2020-6533: Type Confusion in V8.
    • Low CVE-2020-6534: Heap buffer overflow in WebRTC.
    • Low CVE-2020-6535: Insufficient data validation in WebUI.
    • Low CVE-2020-6536: Incorrect security UI in PWAs.
  • Use bundled xcb-proto as we need to generate py2 bindings
  • Try to fix non-wayland build for Leap builds

This update was imported from the openSUSE:Leap:15.1:Update update project.

Record
openSUSE-SU-2020:1061-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1148-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to version 70.0.3728.71

    • DNA-86267 Make Recently closed tabs appearance consistent with Search for open tabs.
    • DNA-86988 Opera 70 translations
    • DNA-87530 Zen news leads not loading
    • DNA-87636 Fix displaying folder icon for closed windows in recently closed list
    • DNA-87682 Replace Extensions icon in toolbar with icon from sidebar
    • DNA-87756 Extend chrome.sessions.getRecentlyClosed with information about last active tab in window.
    • DNA-87778 Crash at opera::InstantSearchViewViews:: ~InstantSearchViewViews()
    • DNA-87815 Change affiliate links for AliExpress Search

  • Update to version 70.0.3728.59

    • CHR-8010 Update chromium on desktop-stable-84-3728 to 84.0.4147.89
    • DNA-87019 The video image does not respond to the pressing after closed the “Quit Opera?” dialog
    • DNA-87342 Fix right padding in settings > weather section
    • DNA-87427 Remove unneeded information from the requests’ diagnostics
    • DNA-87560 Crash at views::Widget::GetNativeView()
    • DNA-87561 Crash at CRYPTO_BUFFER_len
    • DNA-87599 Bypass VPN for default search engines doesn’t work
    • DNA-87611 Unittests fails on declarativeNetRequest and declarativeNetRequestFeedback permissions
    • DNA-87612 [Mac] Misaligned icon in address bar
    • DNA-87619 [Win/Lin] Misaligned icon in address bar
    • DNA-87716 [macOS/Windows] Crash when Search in tabs is open and Opera is minimized
    • DNA-87749 Crash at opera::InstantSearchSuggestionLineView:: SetIsHighlighted(bool)

  • The update to chromium 84.0.4147.89 fixes following issues:

    • CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536

  • Complete Opera 70.0 changelog at: https://blogs.opera.com/desktop/changelog-for-70/

  • Update to version 69.0.3686.77

    • DNA-84207 New Yubikey enrollment is not working
    • DNA-87185 Lost translation
    • DNA-87382 Integrate scrolling to top of the feed with the existing scroll position restoration
    • DNA-87535 Sort out news on start page state
    • DNA-87588 Merge “Prevent pointer from being sent in the clear over SCTP” to desktop-stable-83-3686

  • Update to version 69.0.3686.57

    • DNA-86682 Title case in Russian translation
    • DNA-86807 Title case in O69 BR Portuguese translation
    • DNA-87104 Right click context menu becomes scrollable sometimes
    • DNA-87376 Search in tabs opens significantly slower in O69
    • DNA-87505 [Welcome Pages][Stats] Session stats for Welcome and Upgrade pages
    • DNA-87535 Sort out news on start page state
Record
openSUSE-SU-2020:1148-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1172-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to version 70.0.3728.71

    • DNA-86267 Make Recently closed tabs appearance consistent with Search for open tabs.
    • DNA-86988 Opera 70 translations
    • DNA-87530 Zen news leads not loading
    • DNA-87636 Fix displaying folder icon for closed windows in recently closed list
    • DNA-87682 Replace Extensions icon in toolbar with icon from sidebar
    • DNA-87756 Extend chrome.sessions.getRecentlyClosed with information about last active tab in window.
    • DNA-87778 Crash at opera::InstantSearchViewViews:: ~InstantSearchViewViews()
    • DNA-87815 Change affiliate links for AliExpress Search

  • Update to version 70.0.3728.59

    • CHR-8010 Update chromium on desktop-stable-84-3728 to 84.0.4147.89
    • DNA-87019 The video image does not respond to the pressing after closed the “Quit Opera?” dialog
    • DNA-87342 Fix right padding in settings > weather section
    • DNA-87427 Remove unneeded information from the requests’ diagnostics
    • DNA-87560 Crash at views::Widget::GetNativeView()
    • DNA-87561 Crash at CRYPTO_BUFFER_len
    • DNA-87599 Bypass VPN for default search engines doesn’t work
    • DNA-87611 Unittests fails on declarativeNetRequest and declarativeNetRequestFeedback permissions
    • DNA-87612 [Mac] Misaligned icon in address bar
    • DNA-87619 [Win/Lin] Misaligned icon in address bar
    • DNA-87716 [macOS/Windows] Crash when Search in tabs is open and Opera is minimised
    • DNA-87749 Crash at opera::InstantSearchSuggestionLineView:: SetIsHighlighted(bool)

  • The update to chromium 84.0.4147.89 fixes following issues:

    • CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536

  • Complete Opera 70.0 changelog at: https://blogs.opera.com/desktop/changelog-for-70/

  • Update to version 69.0.3686.77

    • DNA-84207 New Yubikey enrollment is not working
    • DNA-87185 Lost translation
    • DNA-87382 Integrate scrolling to top of the feed with the existing scroll position restoration
    • DNA-87535 Sort out news on startpage state
    • DNA-87588 Merge “Prevent pointer from being sent in the clear over SCTP” to desktop-stable-83-3686

  • Update to version 69.0.3686.57

    • DNA-86682 Title case in Russian translation
    • DNA-86807 Title case in O69 BR Portuguese translation
    • DNA-87104 Right click context menu becomes scrollable sometimes
    • DNA-87376 Search in tabs opens significantly slower in O69
    • DNA-87505 [Welcome Pages][Stats] Session stats for Welcome and Upgrade pages
    • DNA-87535 Sort out news on startpage state
Record
openSUSE-SU-2020:1172-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 87.0.4280.88-0.1
87.0.4280.88-0.1
chromium
Debian:13
 before 87.0.4280.88-0.1
87.0.4280.88-0.1
chromium
Debian:14
 before 87.0.4280.88-0.1
87.0.4280.88-0.1
chromium
Debian:10
From an advisory covering 140 CVEs
 before 87.0.4280.88-0.4~deb10u1, plus listed versions
73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1
Show 42 moreShow less
76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.116-183.0.4103.116-1~deb10u183.0.4103.116-1~deb10u283.0.4103.116-1~deb10u383.0.4103.116-283.0.4103.116-383.0.4103.116-3.183.0.4103.83-184.0.4147.105-184.0.4147.89-187.0.4280.88-0.187.0.4280.88-0.287.0.4280.88-0.3
87.0.4280.88-0.4~deb10u1
chromium-browser
Red Hat:rhel_extras:6
From an advisory covering 32 CVEs
 before 0:84.0.4147.105-2.el6_10
0:84.0.4147.105-2.el6_10
chromium-browser-debuginfo
Red Hat:rhel_extras:6
From an advisory covering 32 CVEs
 before 0:84.0.4147.105-2.el6_10
0:84.0.4147.105-2.el6_10
chromium-browser
Ubuntu:16.04:LTS
 before 84.0.4147.105-0ubuntu0.16.04.1, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 45 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1
84.0.4147.105-0ubuntu0.16.04.1
chromium-browser
Ubuntu:18.04:LTS
 before 84.0.4147.105-0ubuntu0.18.04.1, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 38 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.1
84.0.4147.105-0ubuntu0.18.04.1
chromium
openSUSE:Leap 15.2
From an advisory covering 26 CVEs
 before 84.0.4147.89-lp152.2.6.2
84.0.4147.89-lp152.2.6.2
chromium
openSUSE:Leap 15.1
From an advisory covering 26 CVEs
 before 84.0.4147.89-lp151.2.109.1
84.0.4147.89-lp151.2.109.1
Show 6 moreShow less
Affected packages
PackageAffectedFixed
chromium
SUSE:Package Hub 15 SP2
From an advisory covering 26 CVEs
 before 84.0.4147.89-bp152.2.7.1
84.0.4147.89-bp152.2.7.1
chromium
SUSE:Package Hub 15 SP1
From an advisory covering 26 CVEs
 before 84.0.4147.89-bp151.3.94.1
84.0.4147.89-bp151.3.94.1
opera
openSUSE:Leap 15.1 NonFree
From an advisory covering 26 CVEs
 before 70.0.3728.71-lp151.2.24.1
70.0.3728.71-lp151.2.24.1
opera
openSUSE:Leap 15.2 NonFree
From an advisory covering 26 CVEs
 before 70.0.3728.71-lp152.2.12.1
70.0.3728.71-lp152.2.12.1
chromium
openSUSE:Tumbleweed
From an advisory covering 1081 CVEs
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-6528 is a medium vulnerability (CVSS 4.3) in Google Chrome, published July 20, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. Fixed in chromium 87.0.4280.88-0.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 13 versions and 2,264 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open