Medium severity6.5NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026

CVE-2020-6497

Description

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI.

Affected products

Google/Chromellm-fuzzy2 versions
<83.0.4103.88+ 1 more
- (no CPE)range: <83.0.4103.88
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.htmlnvdVendor Advisory
www.debian.org/security/2020/dsa-4714nvdThird Party Advisory
crbug.com/1069246nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000