Bypassing Navigation Restrictions via Crafted Intents in Google Chrome on Android

Bypassing Navigation Restrictions via Crafted Intents in Google Chrome on Android

CVE-2020-15980 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.

Learn more about our Cis Benchmark Audit For Google Android.