Read the docs
Red Hat Security Advisory

RHSA-2020:3560

chromium-browser security update

Released 2020-08-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 15 records

TI-2020-05400 CVE-2020-6551 · GHSA-mwjp-gcwv-rwcr

Use after free in Google Chrome

Priority MEDIUM 60

Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27744 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05399 CVE-2020-6550 · GHSA-hr8v-c379-cg85

Use after free in Google Chrome

Priority MEDIUM 60

Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2754 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05398 CVE-2020-6549 · GHSA-9mg5-2pf2-x28v

Use after free in Google Chrome

Priority MEDIUM 60

Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2754 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05405 CVE-2020-6556 · GHSA-fffr-w5cq-wghr

Out-of-bounds write in Google Chrome

Priority MEDIUM 44

Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03291 Published 2020-09-21 Fixed in 84.0.4147.135 CWE-787
TI-2020-05397 CVE-2020-6548 · GHSA-jjhp-q6qv-36g4

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02606 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-787
TI-2020-05391 CVE-2020-6542 · GHSA-f384-j97r-h7rp

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02028 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05402 CVE-2020-6553 · GHSA-mj5m-vqcr-c4pf

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01521 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05401 CVE-2020-6552 · GHSA-3rpp-4v39-5h22

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01521 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05394 CVE-2020-6545 · GHSA-4xx4-xqw7-4f8r

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01369 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05393 CVE-2020-6544 · GHSA-jqhh-x964-vqg4

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01379 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05392 CVE-2020-6543 · GHSA-g5x2-f83w-r4hx

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01379 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05403 CVE-2020-6554 · GHSA-6xgq-qqh9-3v8g

Use after free in Google Chrome

Priority LOW 38

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00615 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-416
TI-2020-05404 CVE-2020-6555 · GHSA-jfxf-h9g6-34fv

Out-of-bounds read in Google Chrome

Priority LOW 37

Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.02157 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-125
TI-2020-05395 CVE-2020-6546 · GHSA-xjhx-fvc5-fv5p

Link following in Google Chrome

Priority LOW 33

Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00203 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-59
TI-2020-05396 CVE-2020-6547 · GHSA-qprx-58vg-chx6

Clickjacking in Google Chrome

Priority LOW 31

Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01084 Published 2020-09-21 Fixed in 84.0.4147.125 CWE-1021