Red Hat Security AdvisoryRHSA-2020:1970
chromium-browser security update
Released 2020-04-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-81.0.4044.122-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-81.0.4044.122-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-81.0.4044.122-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-81.0.4044.122-1.el6_10
Fixes 4 records
Priority MEDIUM 44
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03265 · Published 2020-05-21 · Partial fix · 81.0.4044.122 CWE-416
Priority MEDIUM 41
Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0136 · Published 2020-05-21 · Fixed in 81.0.4044.122 CWE-125
Priority MEDIUM 40
Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01097 · Published 2020-05-21 · Fixed in 81.0.4044.122 CWE-416
Priority LOW 31
Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a crafted domain name.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0091 · Published 2020-05-21 · Fixed in 81.0.4044.122
THREATIST.IORead the docs