Red Hat Security AdvisoryRHSA-2020:0738
chromium-browser security update
Released 2020-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-80.0.3987.122-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-80.0.3987.122-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-80.0.3987.122-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-80.0.3987.122-1.el6_10
Fixes 6 records
Priority CRITICAL 97KEV
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.78808 · Published 2020-02-27 · Fixed in 80.0.3987.122 CWE-843
Priority MEDIUM 47
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0638 · Published 2020-02-27 · Fixed in 80.0.3987.116 CWE-843
Priority MEDIUM 43
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02669 · Published 2020-03-12 · Partial fix CWE-190
Priority MEDIUM 42
Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01783 · Published 2020-02-27 · Fixed in 80.0.3987.122 CWE-787
Priority MEDIUM 41
Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01697 · Published 2020-02-27 · Fixed in 80.0.3987.116 CWE-416
Priority MEDIUM 41
Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01677 · Published 2020-02-27 · Fixed in 80.0.3987.116 CWE-416
THREATIST.IORead the docs