CVE-2020-6570
Google Chrome vulnerability analysis and mitigation

Overview

Information leakage vulnerability (CVE-2020-6570) was discovered in WebRTC component of Google Chrome versions prior to 85.0.4183.83. The vulnerability was disclosed and patched in August 2020, affecting the WebRTC functionality in Chrome browsers (Chrome Release, NVD).

Technical details

The vulnerability is classified as a side-channel information leakage issue in WebRTC that could allow a remote attacker to obtain potentially sensitive information through a crafted WebRTC interaction. The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, indicating network accessibility with low attack complexity and requiring user interaction (NVD).

Impact

If exploited, the vulnerability could allow remote attackers to obtain potentially sensitive information through specially crafted WebRTC interactions. The impact is limited to information disclosure with no direct impact on system integrity or availability (NVD).

Exploitability

The vulnerability requires user interaction and can be exploited remotely through crafted WebRTC interactions. The attack complexity is considered low, requiring no special privileges for exploitation (NVD).

Mitigation and workarounds

The vulnerability was patched in Google Chrome version 85.0.4183.83. Users and administrators should upgrade to this version or later to mitigate the risk. The fix was also incorporated into various Linux distributions including Debian, Fedora, and openSUSE through their respective security updates (Chrome Release, Debian Advisory).

Additional resources


SourceThis report was generated using AI

Related Google Chrome vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-76023HIGH8.8
  • Google Chrome logoGoogle Chrome
  • chromedriver
NoYesAug 20, 2026
CVE-2026-76022HIGH8.8
  • Google Chrome logoGoogle Chrome
  • chromium
NoYesAug 20, 2026
CVE-2026-76021HIGH8.8
  • Google Chrome logoGoogle Chrome
  • chromedriver
NoYesAug 20, 2026
CVE-2026-76019HIGH8.1
  • Google Chrome logoGoogle Chrome
  • chromium-qt5-ui
NoYesAug 20, 2026
CVE-2026-76020HIGH7.5
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesAug 20, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management