CVE-2020-6402

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87

Description The issue is related to insufficient policy enforcement in downloads and insufficient input validation. This could allow a remote attacker to gain unauthorized access to information, compromise its integrity and availability, and execute arbitrary code via a crafted Chrome Extension if a user is convinced to install a malicious extension.

Recommendations For Google Chrome versions prior to 80.0.3987.87, update to version 80.0.3987.87 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to minimize the risk of exploitation. Avoid using the extension functionality in Google Chrome until the issue is resolved.