Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 5

• Critical 9.6
  CVE-2020-15999 Exploited Public exploit EPSS 64%

  Heap buffer overflow in CefSharp

  Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet
  Nov 3, 2020

  KEV Nov 3, 2021
• Unscored —
  CVE-2020-16000

  Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-16001

  Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap c…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-16002

  Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020
• Unscored —
  CVE-2020-16003

  Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 3, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890267
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890269
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4351.json
• report
  https://access.redhat.com/security/cve/CVE-2020-15999
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-15999
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-15999
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2020-16000
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16000
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-16000
• article
  https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
• report
  https://access.redhat.com/security/cve/CVE-2020-16001
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16001
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-16001
• report
  https://access.redhat.com/security/cve/CVE-2020-16002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16002
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-16002
• report
  https://access.redhat.com/security/cve/CVE-2020-16003
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16003
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-16003