Red Hat Security AdvisoryRHSA-2020:4206
chromium-browser security update
Released 2020-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-85.0.4183.121-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-85.0.4183.121-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-85.0.4183.121-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-85.0.4183.121-1.el6_10
Fixes 7 records
Priority MEDIUM 44
Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome…
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01473 · Published 2020-09-21 · Fixed in 85.0.4183.121
Priority MEDIUM 44
Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome…
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01473 · Published 2020-09-21 · Fixed in 85.0.4183.121
Priority MEDIUM 43
Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02948 · Published 2020-09-21 · Fixed in 85.0.4183.121 CWE-843
Priority MEDIUM 43
Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02942 · Published 2020-09-21 · Fixed in 85.0.4183.121 CWE-20
Priority MEDIUM 42
Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01897 · Published 2020-09-21 · Fixed in 85.0.4183.121
Priority MEDIUM 42
Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01851 · Published 2020-09-21 · Fixed in 85.0.4183.121 CWE-787
Priority LOW 23
Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Ch…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01331 · Published 2020-09-21 · Fixed in 85.0.4183.121