CVE-2020-6426 describes a heap corruption vulnerability in Google Chrome's V8 JavaScript engine, affecting versions prior to 80.0.3987.149, as well as Debian, Fedora, openSUSE, and SUSE distributions. This medium-severity flaw (CVSS 6.5) can be exploited remotely with low complexity by an unauthenticated attacker, requiring user interaction (e.g., visiting a crafted HTML page) to achieve high integrity impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, despite some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 80.0.3987.149CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
15.0CPE matchmatch criteria | cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* | ||
12CPE matchmatch criteria | cpe:2.3:o:suse:suse_linux_enterprise_desktop:12:*:*:*:*:*:*:* | ||
12CPE matchmatch criteria | cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:* | ||
30CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.