Red Hat Security Advisory

RHSA-2020:2643

chromium-browser security update

Released 2020-06-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-83.0.4103.106-1.el6_10
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-83.0.4103.106-1.el6_10
Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-83.0.4103.106-1.el6_10
Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-83.0.4103.106-1.el6_10

Fixes 3 records

TI-2020-05357 CVE-2020-6507 · GHSA-hqj4-jqvv-8f53

Improper input validation in Google Chrome

MEDIUM 56

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.19082 Published 2020-07-22 Fixed in 83.0.4103.106 CWE-20

TI-2020-05355 CVE-2020-6505 · GHSA-r46g-2xpj-55mc

Use after free in Google Chrome

MEDIUM 43

Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00981 Published 2020-07-22 Fixed in 83.0.4103.106 CWE-416

TI-2020-05356 CVE-2020-6506 · GHSA-36j3-xxf7-4pqg

Cross-site scripting in Google Chrome

LOW 35

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03718 Published 2020-07-22 Fixed in 83.0.4103.106, 11.0.0 CWE-79