Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 32

• Unscored —
  CVE-2020-6510

  Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentiall…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6511

  Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6512

  Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6513

  Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6514 Public exploit

  Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged netwo…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 22, 2020
• Unscored —
  CVE-2020-6515

  Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6516 Public exploit

  Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6517

  Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6518

  Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced th…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6519 Public exploit EPSS 10%

  Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6520

  Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6521

  Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6522

  Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote atta…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6523

  Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6524

  Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6525

  Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6526

  Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypa…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6527

  Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass conte…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6528

  Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof th…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6529

  Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged netwo…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6530

  Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6531

  Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6532

  Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6533

  Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6534

  Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6535

  Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6536

  Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the us…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jul 22, 2020
• Unscored —
  CVE-2020-6537

  Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6538

  Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6539

  Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap cor…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6540

  Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020
• Unscored —
  CVE-2020-6541 EPSS 22%

  Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Sep 21, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857320
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857321
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857322
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857323
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857324
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857325
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857326
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857328
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857329
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857330
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857331
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857332
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857333
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857336
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857337
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857339
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857341
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857342
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857352
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1857400
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1861464
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1861465
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1861466
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1861467
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1861468
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1861469
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3377.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6510
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6510
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6510
• article
  https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2020-6511