Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 30

• Unscored —
  CVE-2020-6465

  Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6466

  Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the render…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6467

  Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6468 Public exploit

  Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6469

  Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6470

  Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6471

  Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6472

  Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6473

  Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain pot…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6474

  Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6475

  Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof secur…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6476

  Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6478

  Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof s…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6479

  Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof secur…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6480

  Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6481

  Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to p…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6482

  Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6483

  Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6484

  Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6485

  Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6486

  Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypa…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6487

  Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6488

  Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6489

  Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who ha…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6490

  Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been ab…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6491

  Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to sp…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  May 21, 2020
• Unscored —
  CVE-2020-6493

  Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromise…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 3, 2020
• Unscored —
  CVE-2020-6494

  Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof …

  Google Chrome chromium Browsers Debian
  Jun 3, 2020
• Unscored —
  CVE-2020-6495

  Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jun 3, 2020
• Unscored —
  CVE-2020-6496

  Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially per…

  Google Chrome chromium Browsers Debian
  Jun 3, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837877
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837879
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837880
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837882
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837883
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837884
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837889
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837892
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837893
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837894
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837897
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837898
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837900
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837901
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837902
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837912
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1837927
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1844554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1844555
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1844556
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1844557
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2544.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6465
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6465
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6465
• article
  https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6466