Red Hat Security AdvisoryRHSA-2016:0525
chromium-browser security update
Released 2016-03-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-49.0.2623.108-1.el6
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-49.0.2623.108-1.el6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-49.0.2623.108-1.el6
Fixes 6 records
Priority CRITICAL 97KEV
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of serv…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.4811 · Published 2016-03-29 · Fixed CWE-125
Priority MEDIUM 43
The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial o…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02876 · Published 2016-03-29 · Fixed CWE-119
Priority MEDIUM 42
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of se…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01928 · Published 2016-03-29 · Fixed
Priority MEDIUM 42
Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02053 · Published 2016-03-29 · Fixed
Priority MEDIUM 41
Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01228 · Published 2016-03-29 · Fixed
Priority MEDIUM 40
The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have u…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01199 · Published 2016-03-29 · Fixed