VULNERABILITY INTELLIGENCE

CVE-2020-15984

CVSS score6.5 MEDIUM

EPSS probability1.30%

CISA KEVNot currently listed

Published2020-11-03

Last modified2026-06-17

Description

Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.