Read the docs
Red Hat Security Advisory

RHSA-2020:4206

chromium-browser security update

Released 2020-10-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

Priority MEDIUM 44

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01473 Published 2020-09-21 Fixed in 85.0.4183.121
Priority MEDIUM 44

Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01473 Published 2020-09-21 Fixed in 85.0.4183.121
TI-2020-12577 CVE-2020-15965 · GHSA-5883-cq6h-c598

Type confusion in Google Chrome

Priority MEDIUM 43

Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02948 Published 2020-09-21 Fixed in 85.0.4183.121 CWE-843
TI-2020-12576 CVE-2020-15964 · GHSA-q4x3-5q32-g3h6

Improper input validation in Google Chrome

Priority MEDIUM 43

Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2020-09-21 Fixed in 85.0.4183.121 CWE-20
TI-2020-12572 CVE-2020-15960 · GHSA-fvqv-8686-3678

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01851 Published 2020-09-21 Fixed in 85.0.4183.121 CWE-787
Priority LOW 23

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Ch…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01331 Published 2020-09-21 Fixed in 85.0.4183.121