Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 27

• Unscored —
  CVE-2020-15967

  Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sa…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15968

  Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15969

  Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Nov 3, 2020
• Unscored —
  CVE-2020-15970

  Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15971

  Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the ren…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15972

  Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15973

  Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15974

  Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15975

  Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15976

  Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15977

  Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obt…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15978

  Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15979

  Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15980

  Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker t…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15981

  Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sens…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15982

  Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potent…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15983

  Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to by…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15984

  Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to s…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15985

  Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof securit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15986

  Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15987

  Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15988

  Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacke…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15989

  Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15990

  Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the ren…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15991

  Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-15992

  Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-6557

  Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885883
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885884
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885888
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885889
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885892
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885893
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885894
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885897
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885901
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885902
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885903
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885905
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885906
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885908
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885910
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885912
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4235.json
• report
  https://access.redhat.com/security/cve/CVE-2020-6557
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-6557
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-6557
• article
  https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2020-15967
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15967
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15967
• report
  https://access.redhat.com/security/cve/CVE-2020-15968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15968
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15968