Red Hat Security AdvisoryRHSA-2020:4351
chromium-browser security update
Released 2020-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-86.0.4240.111-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-86.0.4240.111-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-86.0.4240.111-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-86.0.4240.111-1.el6_10
Fixes 5 records
Priority CRITICAL 98KEV
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.63894 · Published 2020-11-03 · Fixed in 86.0.4240.111, 85.3.130 CWE-120
Priority MEDIUM 41
Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01488 · Published 2020-11-03 · Fixed in 86.0.4240.111 CWE-416
Priority MEDIUM 41
Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01655 · Published 2020-11-03 · Fixed in 86.0.4240.111 CWE-416
Priority MEDIUM 41
Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01592 · Published 2020-11-03 · Fixed in 86.0.4240.111 CWE-416
Priority MEDIUM 41
Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01597 · Published 2020-11-03 · Fixed in 86.0.4240.111 CWE-787
THREATIST.IORead the docs