Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 6

• High 8.8
  CVE-2020-6418 Exploited Public exploit EPSS 79%

  Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020

  KEV Nov 3, 2021
• Unscored —
  CVE-2020-10531

  An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, lead…

  chromium-browser icu icu icu Debian Ubuntu Alpine
  Mar 12, 2020
• Unscored —
  CVE-2020-6383

  Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020
• Unscored —
  CVE-2020-6384

  Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020
• Unscored —
  CVE-2020-6386

  Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020
• Unscored —
  CVE-2020-6407

  Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Feb 27, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807343
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807381
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807498
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807499
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807500
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0738.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6383
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6383
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6383
• article
  https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6384
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6384
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6384
• report
  https://access.redhat.com/security/cve/CVE-2020-6386
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6386
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6386
• report
  https://access.redhat.com/security/cve/CVE-2020-6407
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6407
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6407
• article
  https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6418
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6418
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6418
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2020-10531
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-10531
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-10531