Red Hat Security AdvisoryRHSA-2017:0860
chromium-browser security update
Released 2017-03-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-57.0.2987.133-1.el6_9
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-57.0.2987.133-1.el6_9
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-57.0.2987.133-1.el6_9
Fixes 5 records
Priority MEDIUM 46
An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page…
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02557 · Published 2017-10-27 · Fixed CWE-125
Priority MEDIUM 43
A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0246 · Published 2017-10-27 · Fixed CWE-125
Priority MEDIUM 41
A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01237 · Published 2017-10-27 · Fixed CWE-416
Priority MEDIUM 41
An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01436 · Published 2017-10-27 · Fixed CWE-125
Priority MEDIUM 41
An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruptio…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01493 · Published 2017-10-27 · Fixed CWE-119