Red Hat Security AdvisoryRHSA-2020:5165
chromium-browser security update
Released 2020-11-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-86.0.4240.198-1.el6_10
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) chromium-browser-86.0.4240.198-1.el6_10
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-86.0.4240.198-1.el6_10
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-86.0.4240.198-1.el6_10
Fixes 3 records
Priority CRITICAL 100KEV
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0273 · Published 2021-01-08 · Fixed in 86.0.4240.198, 86.0.241 CWE-416
Priority CRITICAL 97KEV
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02756 · Published 2021-01-08 · Fixed in 86.0.4240.198, 86.0.241 CWE-787
Priority MEDIUM 43
Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00866 · Published 2021-01-08 · Fixed in 86.0.4240.193
THREATIST.IORead the docs