Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-6567

18
FAUCET Score

CVE-2020-6567 describes an insufficient input validation vulnerability in Google Chrome's command line handling on Windows, affecting versions prior to 85.0.4183.83, as well as various Debian, Fedora, Microsoft, and OpenSUSE products. This medium-severity vulnerability (CVSS 6.5) can be exploited remotely with low attack complexity, requiring user interaction via a crafted HTML page to bypass navigation restrictions, leading to high integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 85.0.4183.83CPE matchmatch criteria
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
15.0CPE matchmatch criteria
cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
15.0CPE matchmatch criteria
cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
33CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.50%
Probability of exploitation in next 30 days
EPSS Percentile
71.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0150 is in the 84th percentile among its peer group of 26,234 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 SupplementaryFixed in: chromium-browser-0:85.0.4183.83-1.el6_10
View patch
susepatch availablevia nvd_reference
View patch
googlevendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2020-6567Low

chromium-browser: Insufficient validation of untrusted input in command line handling

Aug 25, 2020

References

lists.opensuse.org / opensuse-security-announce/2020-09/msg00072.html
Mailing ListPatchThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2020-09/msg00078.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2020-09/msg00081.html
Mailing ListThird Party Advisory
chromereleases.googleblog.com / 2020/08/stable-channel-update-for-desktop_25.html
Release NotesVendor Advisory
crbug.com / 937179
Permissions RequiredVendor Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT
debian.org / security/2021/dsa-4824
Third Party Advisory