Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.
No PoCs from references.
- https://github.com/Live-Hack-CVE/CVE-2020-6440