VULNERABILITY INTELLIGENCE

CVE-2020-15973

CVSS score6.5 MEDIUM

EPSS probability1.03%

CISA KEVNot currently listed

Published2020-11-03

Last modified2026-06-17

Description

Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.