Medium severity6.5NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026

CVE-2020-6497

Description

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI.

Affected products

Google/Chromev53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <83.0.4103.88
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <83.0.4103.88
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.htmlnvdVendor Advisory
www.debian.org/security/2020/dsa-4714nvdThird Party Advisory
crbug.com/1069246nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000