Red Hat Security Advisory

RHSA-2018:1446

chromium-browser security update

Released 2018-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-66.0.3359.170-1.el6_9
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-66.0.3359.170-1.el6_9
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-66.0.3359.170-1.el6_9

Fixes 3 records

TI-2018-04480 CVE-2018-6120 · GHSA-qghg-7q9w-3w7w

Integer overflow in Google Chrome

MEDIUM 43

An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02422 Published 2019-01-09 Fixed in 66.0.3359.170 CWE-190

TI-2018-04481 CVE-2018-6121 · GHSA-crqc-mc2m-phxx

Improper input validation in Google Chrome

MEDIUM 40

Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0091 Published 2019-06-27 Fixed in 66.0.3359.170 CWE-20

TI-2018-04482 CVE-2018-6122 · GHSA-j4rq-73w6-wg33

Type confusion in Google Chrome

LOW 39

Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00741 Published 2021-11-02 Fixed in 66.0.3359.139 CWE-843