Red Hat Security AdvisoryRHSA-2016:0707
chromium-browser security update
Released 2016-05-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-50.0.2661.94-1.el6
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-50.0.2661.94-1.el6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-50.0.2661.94-1.el6
Fixes 7 records
Priority MEDIUM 49
extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (us…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03881 · Published 2016-05-14 · Fixed
Priority MEDIUM 45
Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01431 · Published 2016-05-14 · Fixed
Priority MEDIUM 40
The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buf…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01007 · Published 2016-05-14 · Fixed
Priority MEDIUM 40
Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write)…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01128 · Published 2016-05-14 · Fixed CWE-20
Priority LOW 37
Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of…
CVSS 3.0HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01236 · Published 2016-05-14 · Fixed CWE-20
Priority LOW 32
The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information vi…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0181 · Published 2016-05-14 · Fixed CWE-20
Priority LOW 22
The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0098 · Published 2016-05-14 · Fixed CWE-254