Red Hat Security AdvisoryRHSA-2020:1270
chromium-browser security update
Released 2020-04-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-80.0.3987.149-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-80.0.3987.149-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-80.0.3987.149-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-80.0.3987.149-1.el6_10
Fixes 9 records
Priority MEDIUM 44
Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03498 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-416
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02664 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-416
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02314 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02314 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02446 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 43
Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02354 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority LOW 35
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03141 · Published 2020-03-06 · Partial fix CWE-125
Priority LOW 34
Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02861 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority LOW 27
Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0118 · Published 2020-03-23 · Fixed in 80.0.3987.149 CWE-20
THREATIST.IORead the docs