Red Hat Security AdvisoryRHSA-2020:3740
chromium-browser security update
Released 2020-09-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-85.0.4183.102-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-85.0.4183.102-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-85.0.4183.102-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-85.0.4183.102-1.el6_10
Fixes 5 records
Priority MEDIUM 45
Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01769 · Published 2020-09-21 · Fixed in 85.0.4183.102 CWE-416
Priority MEDIUM 41
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01636 · Published 2020-09-21 · Fixed in 85.0.4183.102 CWE-416
Priority LOW 39
Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.01365 · Published 2020-09-21 · Fixed in 85.0.4183.102 CWE-362
Priority LOW 34
Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00358 · Published 2020-09-21 · Fixed in 85.0.4183.102
Priority LOW 23
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via socia…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01241 · Published 2020-09-21 · Fixed in 85.0.4183.102
THREATIST.IORead the docs