ALT-BU-2021-3755-2
Branch c9f1 update bulletin.
Package chromium-gost updated to version 88.0.4324.150-alt0.1.c9 for branch c9f1 in task 265372.
Closed vulnerabilities
BDU:2020-04724
Уязвимость инструментов разработчика браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
BDU:2020-04725
Уязвимость реализации WebAuthentication браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2020-05101
Уязвимость интерфейса пользователя браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2020-05105
Уязвимость графического движка ANGLE браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2020-05106
Уязвимость реализации движка V8 браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2020-05107
Уязвимость браузера Google Chrome, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю повысить свои привилегии
BDU:2020-05108
Уязвимость расширения WebRTC браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2020-05109
Уязвимость реализации движка V8 браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2020-05385
Уязвимость библиотеки FreeType браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
BDU:2020-05604
Уязвимость обработчика PDF-содержимого PDFium веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05605
Уязвимость пользовательского интерфейса веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05606
Уязвимость механизма отображения веб-страниц Blink веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05607
Уязвимость функции печати веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05609
Уязвимость проигрывателя Adobe Flash Player веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05610
Уязвимость файловой системы веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05611
Уязвимость компонента Cryptohome веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05612
Уязвимость компонента ImageBurner веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05613
Уязвимость компонента Networking веб-браузера Google Chrome, позволяющая нарушителю повысить свои привилегии
BDU:2020-05614
Уязвимость компонента WebCodecs веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05615
Уязвимость буфера обмена веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05616
Уязвимость реализации технологии WebRTC веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05617
Уязвимость инструментов разработчика веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05618
Уязвимость реализации технологии WebRTC веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05619
Уязвимость реализации PPAPI веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05620
Уязвимость реализации технологии WASM веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05621
Уязвимость компонента Payments веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05623
Уязвимость компонента Networking веб-браузера Google Chrome, позволяющая нарушителю осуществить подмену домена
BDU:2020-05624
Уязвимость обработчика PDF-содержимого PDFium веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05625
Уязвимость компонента Networking веб-браузера Google Chrome, позволяющая нарушителю повысить свои привилегии
BDU:2020-05626
Уязвимость обработчика JavaScript-сценариев V8 веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05627
Уязвимость функции изоляции сайтов веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05628
Уязвимость компонента base веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2020-05629
Уязвимость функции совместного использования экрана веб-браузера Google Chrome, позволяющая нарушителю проводить спуфинг-атаки
BDU:2020-05630
Уязвимость реализации протокола WebUSB веб-браузера Google Chrome, позволяющая нарушителю проводить спуфинг-атаки
BDU:2020-05631
Уязвимость функции предварительного просмотра вкладки веб-браузера Google Chrome, позволяющая нарушителю проводить спуфинг-атаки
BDU:2020-05632
Уязвимость реализации технологии WebRTC веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
BDU:2020-05633
Уязвимость компонента cros-disks веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2020-05634
Уязвимость механизма обработки файлов cookie веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-00107
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00108
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00109
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00110
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00111
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00112
Уязвимость модуля отображения Blink браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00113
Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00114
Уязвимость браузера Google Chrome, связанная с записью данных за пределами буфера в памяти, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00115
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00116
Уязвимость браузера Google Chrome, связанная с ошибками разграничения доступа, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00117
Уязвимость браузера Google Chrome, связанная с использованием памяти после ее освобождения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00200
Уязвимость веб-интерфейса браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-00858
Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00859
Уязвимость компонента USB Device Handler веб-браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность, конфиденциальность и доступность защищаемой информации
BDU:2021-00860
Уязвимость изолированной среды iframe веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00861
Уязвимость набора инструментов DevTools веб-браузера Google Chrome, позволяющая нарушителю выйти из изолированной программной среды
BDU:2021-00865
Уязвимость набора инструментов DevTools веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00902
Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00903
Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00904
Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00905
Уязвимость механизма отображения веб-страниц Blink веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-00906
Уязвимость расширений веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00907
Уязвимость расширений веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00908
Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00909
Уязвимость средства распознавания речи веб-браузера Google Chrome, позволяющая нарушителю выйти из изолированной программной среды
BDU:2021-00910
Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00913
Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю проводить спуфинг-атаки
BDU:2021-00915
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-00961
Уязвимость компонента Performance API веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-00962
Уязвимость набора инструментов DevTools веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-00963
Уязвимость компонента для отображения веб-страниц WebView веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-00964
Уязвимость компонента Page Info веб-браузера Google Chrome, позволяющая нарушителю проводить спуфинг-атаки с помощью специально созданного запроса
BDU:2021-00965
Уязвимость функции Downloads веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2021-00982
Уязвимость механизма отображения веб-страниц Blink браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-00983
Уязвимость адресной строки Omnibox браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-00984
Уязвимость модуля WebSQL браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-00985
Уязвимость компонента Media браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-00986
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-00987
Уязвимость компонента Cryptohome браузера Google Chrome, позволяющая нарушителю повысить свои привилегии
BDU:2021-01022
Уязвимость компонента Fonts браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-01043
Уязвимость компонента Extensions браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-01048
Уязвимость компонента Tab Groups браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-01049
Уязвимость компонента Payments браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-01065
Уязвимость компонента Navigation браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
BDU:2021-01188
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-01430
Уязвимость реализации протокола WebUSB браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01431
Уязвимость компонента audio браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01432
Уязвимость компонента media браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01458
Уязвимость хранилища браузера Google Chrome, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01459
Уязвимость компонента CSS браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01460
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, связанная с доступом к данным без контроля типов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01461
Уязвимость реализации технологии WebRTC браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01462
Уязвимость реализации протокола управления передачей потока (SCTP) браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01463
Уязвимость инструментов разработчика браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01464
Уязвимость реализации технологии WebRTC браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01465
Уязвимость компонента Content Security Policy (CSP) браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01466
Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01467
Уязвимость компонента Skia браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01468
Уязвимость функции Автозаполнения браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01469
Уязвимость компонента CSP браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01470
Уязвимость компонента history браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01471
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01474
Уязвимость обработчика PDF-содержимого PDFium браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01475
Уязвимость модуля отображения Blink браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01476
Уязвимость компонента autofill браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01477
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01478
Уязвимость модуля отображения Blink браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01484
Уязвимость компонента WebXR браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01485
Уязвимость компонента audio браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01486
Уязвимость реализации технологии WebRTC программных средств Google Chrome, Firefox, Firefox-ESR и Thunderbird, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01487
Уязвимость расширений браузера Google Chrome, связанная с недостатками разграничения доступа к некоторым функциям, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01488
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01489
Уязвимость расширений браузера Google Chrome, связанная с недостатками разграничения доступа к некоторым функциям, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01490
Уязвимость расширений браузера Google Chrome, связанная с недостатками разграничения доступа к некоторым функциям, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01491
Уязвимость компонента networking браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01499
Уязвимость компонента scheduling браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01500
Уязвимость компонента IndexedDB браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01501
Уязвимость компонента media браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01502
Уязвимость компонента media браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01503
Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01504
Уязвимость компонента PWAs браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01505
Уязвимость пользовательского интерфейса WebUI браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01506
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01507
Уязвимость реализации режима Scroll-To-Text браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01508
Уязвимость изолированной среды iframe браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01509
Уязвимость компонента WebAudio браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01510
Уязвимость реализации external protocol браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01511
Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01512
Уязвимость компонента developer tools браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01513
Уязвимость компонента Content Security Policy браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01514
Уязвимость компонента background fetch браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01515
Уязвимость компонента media браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01516
Уязвимость менеджера паролей браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01517
Уязвимость реализации технологии WebRTC браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01518
Уязвимость компонента cache браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01519
Уязвимость программы 3D рендера SwiftShader браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01520
Уязвимость расширений браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01521
Уязвимость функции печати браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01522
Уязвимость модуля отображения Blink браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01523
Уязвимость компонента media браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01524
Уязвимость компонента SerialPort браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01567
Уязвимость браузера Google Chrome, существующая из-за считывания данных за пределами заданного буфера, позволяющая нарушителю скомпрометировать процесс рендеринга и раскрыть защищаемую информацию
BDU:2021-01645
Уязвимость функции blink::FileReaderLoader::OnReceivedData браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-01647
Уязвимость расширения браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-01648
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-01665
Уязвимость реализации блока COOKIE-ECHO расширения WebRTC браузеров Google Chrome, Mozilla Firefox, Firefox ESR и Firefox for Android, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
BDU:2021-01675
Уязвимость функции MediaStreamCaptureIndicator::WebContentsDeviceUsage::AddDevices() браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-01704
Уязвимость функции OffscreenCanvas браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01705
Уязвимость адресной строки Omnibox браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01706
Уязвимость стандарта передачи данных WebRTC браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01707
Уязвимость компонента WebUSB браузера Google Chrome, связанная с целочисленным переполнением значения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01708
Уязвимость компонента media браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01709
Уязвимость компонента «Разрешения» браузера Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-01710
Уязвимость компонента Content Security Policy браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01711
Уязвимость функции Автозаполнения браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-01712
Уязвимость компонента presentation API браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01713
Уязвимость компонента SwiftShader браузера Google Chrome, связанная с выходом операции за допустимые границы буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01714
Уязвимость расширений браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01715
Уязвимость механизма отображения веб-страниц Blink браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01749
Уязвимость реализация WebRTC веб-браузеров Google Chrome, Firefox, Firefox-ESR и почтового клиента Thunderbird, связанная с переполнением буфера кучи, позволяющая нарушителю нарушить целостность данных
BDU:2021-01752
Уязвимость расширений браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01753
Уязвимость компонента speech браузера Google Chrome, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01754
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01755
Уязвимость библиотеки передачи сообщений Mojo браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
BDU:2021-01756
Уязвимость модуля отображения Blink браузера Google Chrome, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю оказать воздействие на целостность данных
BDU:2021-03536
Уязвимость программных средств Google Chrome, Firefox, Firefox ESR, Thunderbird, связанная с ошибкой подтверждения источника данных, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2021-03537
Уязвимость обработчика JavaScript-сценариев V8 веб-браузера Google Chrome, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальной информации или вызвать отказ в обслуживании
BDU:2021-03632
Уязвимость веб-браузера Google Chrome, связанная с использованием памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальной информации или вызвать отказ в обслуживании
BDU:2021-03633
Уязвимость реализации механизма CORS веб-браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальной информации
BDU:2021-03816
Уязвимость обработчика PDF-содержимого PDFium веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-06059
Уязвимость компонента video браузера Google Chrome, позволяющая нарушителю выйти из изолированной программной среды
BDU:2021-06061
Уязвимость пользовательского интерфейса WebUI браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения доступа
BDU:2021-06062
Уязвимость компонента NFC браузера Google Chrome , связанная с использованием памяти после её освобождения, позволяющая нарушителю выйти из изолированной программной среды
BDU:2021-06064
Уязвимость компонента Payments браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности с помощью специально созданной HTML страницы
BDU:2021-06065
Уязвимость реализации диалоговых окон браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-06066
Уязвимость API для доступа к устройствам виртуальной реальности WebVR браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности с помощью специально созданной HTML страницы
BDU:2021-06067
Уязвимость компонента Audio браузера Google Chrome, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2021-06068
Уязвимость функции Downloads веб-браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
BDU:2021-06071
Уязвимость компонента Media браузера Google Chrome, вызванная целочисленным переполнением, позволяющая нарушителю вызвать переполнение буфера с помощью специально созданной HTML страницы
BDU:2021-06072
Уязвимость функции Intents браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения доступа
BDU:2021-06073
Уязвимость функции Navigation браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения
BDU:2021-06076
Уязвимость адресной строки Omnibox браузера Google Chrome, позволяющая нарушителю подделать содержимое адресной строки с помощью специально созданного URL
BDU:2021-06077
Уязвимость механизма отображения веб-страниц Blink браузера Google Chrome, позволяющая нарушителю проводить спуфинг-атаки
BDU:2022-00069
Уязвимость компонента для отображения веб-страниц WebView браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
BDU:2023-01619
Уязвимость библиотеки ANGLE браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Modified: 2024-11-21
CVE-2014-7939
Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- openSUSE-SU-2015:0441
- openSUSE-SU-2015:0441
- RHSA-2015:0093
- RHSA-2015:0093
- 62383
- 62383
- 62665
- 62665
- GLSA-201502-13
- GLSA-201502-13
- 72288
- 72288
- 1031623
- 1031623
- https://code.google.com/p/chromium/issues/detail?id=399951
- https://code.google.com/p/chromium/issues/detail?id=399951
Modified: 2024-11-21
CVE-2014-7941
The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- openSUSE-SU-2015:0441
- openSUSE-SU-2015:0441
- RHSA-2015:0093
- RHSA-2015:0093
- 62383
- 62383
- 62665
- 62665
- GLSA-201502-13
- GLSA-201502-13
- 72288
- 72288
- 1031623
- 1031623
- https://code.google.com/p/chromium/issues/detail?id=428557
- https://code.google.com/p/chromium/issues/detail?id=428557
- https://codereview.chromium.org/697863002
- https://codereview.chromium.org/697863002
Modified: 2024-11-21
CVE-2014-7942
The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- openSUSE-SU-2015:0441
- openSUSE-SU-2015:0441
- RHSA-2015:0093
- RHSA-2015:0093
- 62383
- 62383
- 62575
- 62575
- 62665
- 62665
- GLSA-201502-13
- GLSA-201502-13
- 72288
- 72288
- 1031623
- 1031623
- USN-2476-1
- USN-2476-1
- https://code.google.com/p/chromium/issues/detail?id=426762
- https://code.google.com/p/chromium/issues/detail?id=426762
Modified: 2024-11-21
CVE-2014-7943
Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- openSUSE-SU-2015:0441
- openSUSE-SU-2015:0441
- RHSA-2015:0093
- RHSA-2015:0093
- 62383
- 62383
- 62575
- 62575
- 62665
- 62665
- GLSA-201502-13
- GLSA-201502-13
- 72288
- 72288
- 1031623
- 1031623
- USN-2476-1
- USN-2476-1
- https://code.google.com/p/chromium/issues/detail?id=422492
- https://code.google.com/p/chromium/issues/detail?id=422492
Modified: 2024-11-21
CVE-2015-1205
Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- APPLE-SA-2015-09-16-1
- APPLE-SA-2015-09-16-1
- APPLE-SA-2015-09-16-3
- APPLE-SA-2015-09-16-3
- openSUSE-SU-2015:0441
- openSUSE-SU-2015:0441
- 62383
- 62383
- 62575
- 62575
- GLSA-201502-13
- GLSA-201502-13
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- 72288
- 72288
- 1031623
- 1031623
- USN-2476-1
- USN-2476-1
- https://code.google.com/p/chromium/issues/detail?id=327070
- https://code.google.com/p/chromium/issues/detail?id=327070
- https://code.google.com/p/chromium/issues/detail?id=334448
- https://code.google.com/p/chromium/issues/detail?id=334448
- https://code.google.com/p/chromium/issues/detail?id=410030
- https://code.google.com/p/chromium/issues/detail?id=410030
- https://code.google.com/p/chromium/issues/detail?id=411026
- https://code.google.com/p/chromium/issues/detail?id=411026
- https://code.google.com/p/chromium/issues/detail?id=411156
- https://code.google.com/p/chromium/issues/detail?id=411156
- https://code.google.com/p/chromium/issues/detail?id=413530
- https://code.google.com/p/chromium/issues/detail?id=413530
- https://code.google.com/p/chromium/issues/detail?id=422765
- https://code.google.com/p/chromium/issues/detail?id=422765
- https://code.google.com/p/chromium/issues/detail?id=423899
- https://code.google.com/p/chromium/issues/detail?id=423899
- https://code.google.com/p/chromium/issues/detail?id=425040
- https://code.google.com/p/chromium/issues/detail?id=425040
- https://code.google.com/p/chromium/issues/detail?id=425151
- https://code.google.com/p/chromium/issues/detail?id=425151
- https://code.google.com/p/chromium/issues/detail?id=428828
- https://code.google.com/p/chromium/issues/detail?id=428828
- https://code.google.com/p/chromium/issues/detail?id=429134
- https://code.google.com/p/chromium/issues/detail?id=429134
- https://code.google.com/p/chromium/issues/detail?id=429139
- https://code.google.com/p/chromium/issues/detail?id=429139
- https://code.google.com/p/chromium/issues/detail?id=431187
- https://code.google.com/p/chromium/issues/detail?id=431187
- https://code.google.com/p/chromium/issues/detail?id=431603
- https://code.google.com/p/chromium/issues/detail?id=431603
- https://code.google.com/p/chromium/issues/detail?id=432209
- https://code.google.com/p/chromium/issues/detail?id=432209
- https://code.google.com/p/chromium/issues/detail?id=434723
- https://code.google.com/p/chromium/issues/detail?id=434723
- https://code.google.com/p/chromium/issues/detail?id=435514
- https://code.google.com/p/chromium/issues/detail?id=435514
- https://code.google.com/p/chromium/issues/detail?id=435815
- https://code.google.com/p/chromium/issues/detail?id=435815
- https://code.google.com/p/chromium/issues/detail?id=437655
- https://code.google.com/p/chromium/issues/detail?id=437655
- https://code.google.com/p/chromium/issues/detail?id=438363
- https://code.google.com/p/chromium/issues/detail?id=438363
- https://code.google.com/p/chromium/issues/detail?id=439319
- https://code.google.com/p/chromium/issues/detail?id=439319
- https://code.google.com/p/chromium/issues/detail?id=440572
- https://code.google.com/p/chromium/issues/detail?id=440572
- https://code.google.com/p/chromium/issues/detail?id=440913
- https://code.google.com/p/chromium/issues/detail?id=440913
- https://code.google.com/p/chromium/issues/detail?id=441834
- https://code.google.com/p/chromium/issues/detail?id=441834
- https://code.google.com/p/chromium/issues/detail?id=443274
- https://code.google.com/p/chromium/issues/detail?id=443274
- https://code.google.com/p/chromium/issues/detail?id=443333
- https://code.google.com/p/chromium/issues/detail?id=443333
- https://code.google.com/p/chromium/issues/detail?id=446076
- https://code.google.com/p/chromium/issues/detail?id=446076
- https://code.google.com/p/chromium/issues/detail?id=449894
- https://code.google.com/p/chromium/issues/detail?id=449894
- https://support.apple.com/HT205212
- https://support.apple.com/HT205212
- https://support.apple.com/HT205221
- https://support.apple.com/HT205221
Modified: 2024-11-21
CVE-2015-1346
Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- RHSA-2015:0093
- RHSA-2015:0093
- 62383
- 62383
- 62575
- 62575
- GLSA-201502-13
- GLSA-201502-13
- 1031623
- 1031623
- USN-2476-1
- USN-2476-1
- google-v8-cve20151346-code-exec(100361)
- google-v8-cve20151346-code-exec(100361)
Modified: 2024-11-21
CVE-2017-7000
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Modified: 2024-11-21
CVE-2019-8075
Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
- https://crbug.com/945997
- https://helpx.adobe.com/security/products/flash-player/apsb19-30.html
- FEDORA-2020-10ec8aca61
- FEDORA-2020-3e005ce2e0
- DSA-4824
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
- DSA-4824
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-10ec8aca61
- https://helpx.adobe.com/security/products/flash-player/apsb19-30.html
- https://crbug.com/945997
Modified: 2024-11-21
CVE-2020-15959
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://crbug.com/1122684
- https://crbug.com/1122684
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15960
Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1100136
- https://crbug.com/1100136
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15961
Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1114636
- https://crbug.com/1114636
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15962
Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1121836
- https://crbug.com/1121836
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15963
Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1113558
- https://crbug.com/1113558
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15964
Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1121414
- https://crbug.com/1121414
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15965
Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1126249
- https://crbug.com/1126249
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15966
Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1527
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1542
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1550
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html
- https://crbug.com/1113565
- https://crbug.com/1113565
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- FEDORA-2020-214865ce21
- FEDORA-2020-214865ce21
- GLSA-202009-13
- GLSA-202009-13
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15967
Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1127322
- https://crbug.com/1127322
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15968
Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1126424
- https://crbug.com/1126424
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15969
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- 20201215 APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3
- 20201215 APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3
- 20201215 APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave
- 20201215 APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave
- 20201215 APPLE-SA-2020-12-14-5 watchOS 7.2
- 20201215 APPLE-SA-2020-12-14-5 watchOS 7.2
- 20201215 APPLE-SA-2020-12-14-7 tvOS 14.3
- 20201215 APPLE-SA-2020-12-14-7 tvOS 14.3
- 20201215 APPLE-SA-2020-12-14-8 Safari 14.0.2
- 20201215 APPLE-SA-2020-12-14-8 Safari 14.0.2
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1124659
- https://crbug.com/1124659
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- https://support.apple.com/kb/HT212003
- https://support.apple.com/kb/HT212003
- https://support.apple.com/kb/HT212005
- https://support.apple.com/kb/HT212005
- https://support.apple.com/kb/HT212007
- https://support.apple.com/kb/HT212007
- https://support.apple.com/kb/HT212009
- https://support.apple.com/kb/HT212009
- https://support.apple.com/kb/HT212011
- https://support.apple.com/kb/HT212011
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15970
Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1108299
- https://crbug.com/1108299
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15971
Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1114062
- https://crbug.com/1114062
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15972
Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- http://packetstormsecurity.com/files/172842/Chrome-Renderer-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/172842/Chrome-Renderer-Remote-Code-Execution.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1115901
- https://crbug.com/1115901
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15973
Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1106890
- https://crbug.com/1106890
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15974
Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1104103
- https://crbug.com/1104103
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15975
Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1110800
- https://crbug.com/1110800
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15976
Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1123522
- https://crbug.com/1123522
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15977
Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1097724
- https://crbug.com/1097724
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15978
Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1116280
- https://crbug.com/1116280
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15979
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1127319
- https://crbug.com/1127319
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15980
Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1092453
- https://crbug.com/1092453
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15981
Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1123023
- https://crbug.com/1123023
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15982
Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1039882
- https://crbug.com/1039882
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15983
Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1076786
- https://crbug.com/1076786
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15984
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted URL.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1080395
- https://crbug.com/1080395
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15985
Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1099276
- https://crbug.com/1099276
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15986
Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1100247
- https://crbug.com/1100247
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15987
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1127774
- https://crbug.com/1127774
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15988
Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1092518
- https://crbug.com/1092518
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15989
Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1108351
- https://crbug.com/1108351
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15990
Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1133671
- https://crbug.com/1133671
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15991
Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1133688
- https://crbug.com/1133688
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15992
Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1110195
- https://crbug.com/1110195
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-15995
Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/10/chrome-for-android-update_31.html
- https://chromereleases.googleblog.com/2020/10/chrome-for-android-update_31.html
- https://crbug.com/1132111
- https://crbug.com/1132111
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2025-02-05
CVE-2020-15999
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- 20201118 TCMalloc viewer/dumper - TCMalloc Inspector Tool
- 20201118 TCMalloc viewer/dumper - TCMalloc Inspector Tool
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1139963
- https://crbug.com/1139963
- https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html
- https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html
- FEDORA-2020-6b35849edd
- FEDORA-2020-6b35849edd
- GLSA-202011-12
- GLSA-202011-12
- GLSA-202012-04
- GLSA-202012-04
- GLSA-202401-19
- GLSA-202401-19
- https://security.netapp.com/advisory/ntap-20240812-0001/
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16000
Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1125337
- https://crbug.com/1125337
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16001
Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1135018
- https://crbug.com/1135018
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16002
Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1137630
- https://crbug.com/1137630
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16003
Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1134960
- https://crbug.com/1134960
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16004
Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1831
- openSUSE-SU-2020:1831
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://crbug.com/1138911
- https://crbug.com/1138911
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202011-12
- GLSA-202011-12
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16005
Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1831
- openSUSE-SU-2020:1831
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://crbug.com/1139398
- https://crbug.com/1139398
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202011-12
- GLSA-202011-12
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16006
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1831
- openSUSE-SU-2020:1831
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://crbug.com/1133527
- https://crbug.com/1133527
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202011-12
- GLSA-202011-12
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16007
Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1831
- openSUSE-SU-2020:1831
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://crbug.com/1125018
- https://crbug.com/1125018
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16008
Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1831
- openSUSE-SU-2020:1831
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://crbug.com/1134107
- https://crbug.com/1134107
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202011-12
- GLSA-202011-12
- DSA-4824
- DSA-4824
Modified: 2025-02-05
CVE-2020-16009
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1831
- openSUSE-SU-2020:1831
- http://packetstormsecurity.com/files/159974/Chrome-V8-Turbofan-Type-Confusion.html
- http://packetstormsecurity.com/files/159974/Chrome-V8-Turbofan-Type-Confusion.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://crbug.com/1143772
- https://crbug.com/1143772
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-3e005ce2e0
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202011-12
- GLSA-202011-12
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-16012
Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Modified: 2025-02-05
CVE-2020-16013
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16014
Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16015
Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16016
Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Modified: 2025-02-05
CVE-2020-16017
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16018
Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16019
Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.
Modified: 2024-11-21
CVE-2020-16020
Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file.
Modified: 2024-11-21
CVE-2020-16021
Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.
Modified: 2024-11-21
CVE-2020-16022
Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16023
Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16024
Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- http://packetstormsecurity.com/files/161353/Chrome-SkBitmapOperations-UnPreMultiply-Heap-Buffer-Overflow.html
- http://packetstormsecurity.com/files/161353/Chrome-SkBitmapOperations-UnPreMultiply-Heap-Buffer-Overflow.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
- https://crbug.com/1147430
- https://crbug.com/1147430
Modified: 2024-11-21
CVE-2020-16025
Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- http://packetstormsecurity.com/files/161354/Chrome-ClipboardWin-WriteBitmap-Heap-Buffer-Overflow.html
- http://packetstormsecurity.com/files/161354/Chrome-ClipboardWin-WriteBitmap-Heap-Buffer-Overflow.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html
- https://crbug.com/1147431
- https://crbug.com/1147431
Modified: 2024-11-21
CVE-2020-16026
Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16027
Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension.
Modified: 2024-11-21
CVE-2020-16028
Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16029
Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.
Modified: 2024-11-21
CVE-2020-16030
Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16031
Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16032
Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16033
Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16034
Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16035
Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.
Modified: 2024-11-21
CVE-2020-16036
Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16037
Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16038
Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16039
Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16040
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/162087/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162087/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162106/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162106/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162144/Google-Chrome-SimplfiedLowering-Integer-Overflow.html
- http://packetstormsecurity.com/files/162144/Google-Chrome-SimplfiedLowering-Integer-Overflow.html
- https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
- https://crbug.com/1150649
- https://crbug.com/1150649
Modified: 2024-11-21
CVE-2020-16041
Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
- http://packetstormsecurity.com/files/161581/Chrome-DataElement-Out-Of-Bounds-Read.html
- http://packetstormsecurity.com/files/161581/Chrome-DataElement-Out-Of-Bounds-Read.html
- https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
- https://crbug.com/1151865
- https://crbug.com/1151865
Modified: 2024-11-21
CVE-2020-16042
Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-16043
Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1148309
- https://crbug.com/1148309
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2020-16044
Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.
Modified: 2024-11-21
CVE-2020-6492
Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6493
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:0823
- openSUSE-SU-2020:0823
- openSUSE-SU-2020:0832
- openSUSE-SU-2020:0832
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html
- https://crbug.com/1082105
- https://crbug.com/1082105
- GLSA-202006-02
- GLSA-202006-02
- DSA-4714
- DSA-4714
Modified: 2024-11-21
CVE-2020-6495
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- openSUSE-SU-2020:0823
- openSUSE-SU-2020:0823
- openSUSE-SU-2020:0832
- openSUSE-SU-2020:0832
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html
- https://crbug.com/1072116
- https://crbug.com/1072116
- GLSA-202006-02
- GLSA-202006-02
- DSA-4714
- DSA-4714
Modified: 2024-11-21
CVE-2020-6505
Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6507
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/162088/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162088/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162105/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162105/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_15.html
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_15.html
- https://crbug.com/1086890
- https://crbug.com/1086890
- GLSA-202007-08
- GLSA-202007-08
Modified: 2024-11-21
CVE-2020-6509
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- openSUSE-SU-2020:1032
- openSUSE-SU-2020:1032
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_22.html
- https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_22.html
- https://crbug.com/1092308
- https://crbug.com/1092308
- GLSA-202007-08
- GLSA-202007-08
Modified: 2024-11-21
CVE-2020-6510
Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1103195
- https://crbug.com/1103195
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6511
Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1074317
- https://crbug.com/1074317
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6512
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1084820
- https://crbug.com/1084820
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6513
Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1091404
- https://crbug.com/1091404
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1092
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1092
Modified: 2024-11-21
CVE-2020-6514
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1147
- openSUSE-SU-2020:1147
- openSUSE-SU-2020:1155
- openSUSE-SU-2020:1155
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1179
- openSUSE-SU-2020:1179
- openSUSE-SU-2020:1189
- openSUSE-SU-2020:1189
- openSUSE-SU-2020:1205
- openSUSE-SU-2020:1205
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- http://packetstormsecurity.com/files/158697/WebRTC-usrsctp-Incorrect-Call.html
- http://packetstormsecurity.com/files/158697/WebRTC-usrsctp-Incorrect-Call.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1076703
- https://crbug.com/1076703
- [debian-lts-announce] 20200729 [SECURITY] [DLA 2297-1] firefox-esr security update
- [debian-lts-announce] 20200729 [SECURITY] [DLA 2297-1] firefox-esr security update
- [debian-lts-announce] 20200802 [SECURITY] [DLA 2310-1] thunderbird security update
- [debian-lts-announce] 20200802 [SECURITY] [DLA 2310-1] thunderbird security update
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202007-64
- GLSA-202007-64
- GLSA-202101-30
- GLSA-202101-30
- https://support.apple.com/kb/HT211288
- https://support.apple.com/kb/HT211288
- https://support.apple.com/kb/HT211290
- https://support.apple.com/kb/HT211290
- https://support.apple.com/kb/HT211291
- https://support.apple.com/kb/HT211291
- https://support.apple.com/kb/HT211292
- https://support.apple.com/kb/HT211292
- USN-4443-1
- USN-4443-1
- DSA-4736
- DSA-4736
- DSA-4740
- DSA-4740
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6515
Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1082755
- https://crbug.com/1082755
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6516
Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1092449
- https://crbug.com/1092449
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6517
Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1095560
- https://crbug.com/1095560
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6518
Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/986051
- https://crbug.com/986051
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6519
Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- http://packetstormsecurity.com/files/160353/Chromium-83-CSP-Bypass.html
- http://packetstormsecurity.com/files/160353/Chromium-83-CSP-Bypass.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1064676
- https://crbug.com/1064676
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6520
Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1092274
- https://crbug.com/1092274
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6521
Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1075734
- https://crbug.com/1075734
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6522
Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1052093
- https://crbug.com/1052093
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6523
Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1080481
- https://crbug.com/1080481
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6524
Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1081722
- https://crbug.com/1081722
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6525
Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1091670
- https://crbug.com/1091670
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6526
Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1074340
- https://crbug.com/1074340
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6527
Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/992698
- https://crbug.com/992698
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6529
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/978779
- https://crbug.com/978779
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6530
Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1016278
- https://crbug.com/1016278
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6531
Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1042986
- https://crbug.com/1042986
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6532
Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
- https://crbug.com/1104061
- https://crbug.com/1104061
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6533
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1069964
- https://crbug.com/1069964
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6534
Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1072412
- https://crbug.com/1072412
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6535
Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1073409
- https://crbug.com/1073409
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6536
Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the contents of the Omnibox (URL bar) via a crafted PWA.
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1061
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1148
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1172
- openSUSE-SU-2020:1048
- openSUSE-SU-2020:1048
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
- https://crbug.com/1080934
- https://crbug.com/1080934
- FEDORA-2020-bf684961d9
- FEDORA-2020-bf684961d9
- FEDORA-2020-84d87cbd50
- FEDORA-2020-84d87cbd50
- GLSA-202007-08
- GLSA-202007-08
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6537
Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6538
Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6539
Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6540
Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
- https://crbug.com/1105720
- https://crbug.com/1105720
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6541
Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/159610/Chrome-USB-OnServiceConnectionError-Use-After-Free.html
- http://packetstormsecurity.com/files/159610/Chrome-USB-OnServiceConnectionError-Use-After-Free.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
- https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop_27.html
- https://crbug.com/1106773
- https://crbug.com/1106773
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6542
Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1107433
- https://crbug.com/1107433
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1127
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1127
Modified: 2024-11-21
CVE-2020-6543
Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1104046
- https://crbug.com/1104046
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6544
Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1108497
- https://crbug.com/1108497
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6545
Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1095584
- https://crbug.com/1095584
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6546
Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem.
Modified: 2024-11-21
CVE-2020-6547
Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6548
Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1103827
- https://crbug.com/1103827
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6549
Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/159558/Chrome-MediaElementEventListener-UpdateSources-Use-After-Free.html
- http://packetstormsecurity.com/files/159558/Chrome-MediaElementEventListener-UpdateSources-Use-After-Free.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1105426
- https://crbug.com/1105426
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6550
Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/159609/Chrome-WebIDBGetDBNamesCallbacksImpl-SuccessNamesAndVersionsList-Use-After-Free.html
- http://packetstormsecurity.com/files/159609/Chrome-WebIDBGetDBNamesCallbacksImpl-SuccessNamesAndVersionsList-Use-After-Free.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1106682
- https://crbug.com/1106682
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6551
Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/159611/Chrome-XRSystem-FocusedFrameChanged-and-FocusController-NotifyFocusChangedObservers-Use-After-Free.html
- http://packetstormsecurity.com/files/159611/Chrome-XRSystem-FocusedFrameChanged-and-FocusController-NotifyFocusChangedObservers-Use-After-Free.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1107815
- https://crbug.com/1107815
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6552
Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Modified: 2024-11-21
CVE-2020-6554
Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
Modified: 2024-11-21
CVE-2020-6555
Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html
- https://crbug.com/1105202
- https://crbug.com/1105202
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1123
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1123
Modified: 2024-11-21
CVE-2020-6556
Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_18.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_18.html
- https://crbug.com/1115345
- https://crbug.com/1115345
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6557
Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
- openSUSE-SU-2020:1829
- openSUSE-SU-2020:1829
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop.html
- https://crbug.com/1083278
- https://crbug.com/1083278
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-8aca25b5c8
- FEDORA-2020-127d40f1ab
- FEDORA-2020-127d40f1ab
- FEDORA-2020-4e8e48da22
- FEDORA-2020-4e8e48da22
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6558
Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1109120
- https://crbug.com/1109120
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6559
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1116706
- https://crbug.com/1116706
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6560
Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1108181
- https://crbug.com/1108181
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6561
Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/932892
- https://crbug.com/932892
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6562
Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1086845
- https://crbug.com/1086845
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6563
Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1104628
- https://crbug.com/1104628
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6564
Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/841622
- https://crbug.com/841622
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6565
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1029907
- https://crbug.com/1029907
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6566
Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1065264
- https://crbug.com/1065264
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6567
Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/937179
- https://crbug.com/937179
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6568
Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1092451
- https://crbug.com/1092451
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6569
Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/995732
- https://crbug.com/995732
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6570
Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1084699
- https://crbug.com/1084699
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6571
Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
- https://crbug.com/1085315
- https://crbug.com/1085315
- FEDORA-2020-6da740d38c
- FEDORA-2020-6da740d38c
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6573
Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://crbug.com/1116304
- https://crbug.com/1116304
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6575
Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://crbug.com/1081874
- https://crbug.com/1081874
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2020-6576
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1499
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1510
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1514
- openSUSE-SU-2020:1713
- openSUSE-SU-2020:1713
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html
- https://crbug.com/1111737
- https://crbug.com/1111737
- FEDORA-2020-aea86f913e
- FEDORA-2020-aea86f913e
- FEDORA-2020-2d994b986d
- FEDORA-2020-2d994b986d
- GLSA-202101-30
- GLSA-202101-30
- DSA-4824
- DSA-4824
Modified: 2024-11-21
CVE-2021-21106
Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1148749
- https://crbug.com/1148749
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21107
Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1153595
- https://crbug.com/1153595
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21108
Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1155426
- https://crbug.com/1155426
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21109
Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1152334
- https://crbug.com/1152334
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21110
Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1152451
- https://crbug.com/1152451
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21111
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1149125
- https://crbug.com/1149125
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21112
Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1151298
- https://crbug.com/1151298
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21113
Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1155178
- https://crbug.com/1155178
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21114
Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1150065
- https://crbug.com/1150065
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21115
User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1157814
- https://crbug.com/1157814
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21116
Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
- https://crbug.com/1151069
- https://crbug.com/1151069
- FEDORA-2021-79926272ce
- FEDORA-2021-79926272ce
- FEDORA-2021-d9faeff8eb
- FEDORA-2021-d9faeff8eb
- GLSA-202101-05
- GLSA-202101-05
- DSA-4832
- DSA-4832
Modified: 2024-11-21
CVE-2021-21117
Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.
Modified: 2024-11-21
CVE-2021-21118
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1161357
- https://crbug.com/1161357
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21118
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21118
Modified: 2024-11-21
CVE-2021-21119
Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1160534
- https://crbug.com/1160534
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21119
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21119
Modified: 2024-11-21
CVE-2021-21120
Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1160602
- https://crbug.com/1160602
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21120
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21120
Modified: 2024-11-21
CVE-2021-21121
Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1161143
- https://crbug.com/1161143
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21121
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21121
Modified: 2024-11-21
CVE-2021-21122
Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1162131
- https://crbug.com/1162131
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21122
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21122
Modified: 2024-11-21
CVE-2021-21123
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1137247
- https://crbug.com/1137247
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21123
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21123
Modified: 2024-11-21
CVE-2021-21124
Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1131346
- https://crbug.com/1131346
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21124
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21124
Modified: 2024-11-21
CVE-2021-21125
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1152327
- https://crbug.com/1152327
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21125
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21125
Modified: 2024-11-21
CVE-2021-21126
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1108126
- https://crbug.com/1108126
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21126
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21126
Modified: 2024-11-21
CVE-2021-21127
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1115590
- https://crbug.com/1115590
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21127
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21127
Modified: 2024-11-21
CVE-2021-21128
Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1138877
- https://crbug.com/1138877
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21128
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21128
Modified: 2024-11-21
CVE-2021-21129
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1140403
- https://crbug.com/1140403
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21129
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21129
Modified: 2024-11-21
CVE-2021-21130
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1140410
- https://crbug.com/1140410
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21130
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21130
Modified: 2024-11-21
CVE-2021-21131
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1140417
- https://crbug.com/1140417
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21131
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21131
Modified: 2024-11-21
CVE-2021-21132
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1128206
- https://crbug.com/1128206
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21132
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21132
Modified: 2024-11-21
CVE-2021-21133
Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1157743
- https://crbug.com/1157743
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21133
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21133
Modified: 2024-11-21
CVE-2021-21134
Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1157800
- https://crbug.com/1157800
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21134
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21134
Modified: 2024-11-21
CVE-2021-21135
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1157818
- https://crbug.com/1157818
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21135
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21135
Modified: 2024-11-21
CVE-2021-21136
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1038002
- https://crbug.com/1038002
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21136
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21136
Modified: 2024-11-21
CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1093791
- https://crbug.com/1093791
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21137
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21137
Modified: 2024-11-21
CVE-2021-21138
Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.
Modified: 2024-11-21
CVE-2021-21139
Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/937131
- https://crbug.com/937131
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21139
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21139
Modified: 2024-11-21
CVE-2021-21140
Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1136327
- https://crbug.com/1136327
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21140
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21140
Modified: 2024-11-21
CVE-2021-21141
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html
- https://crbug.com/1140435
- https://crbug.com/1140435
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21141
- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21141
Modified: 2024-11-21
CVE-2021-21142
Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1169317
- https://crbug.com/1169317
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
Modified: 2024-11-21
CVE-2021-21143
Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1163504
- https://crbug.com/1163504
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
Modified: 2024-11-21
CVE-2021-21144
Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1163845
- https://crbug.com/1163845
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
Modified: 2024-11-21
CVE-2021-21145
Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1154965
- https://crbug.com/1154965
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
Modified: 2024-11-21
CVE-2021-21146
Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1161705
- https://crbug.com/1161705
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
Modified: 2024-11-21
CVE-2021-21147
Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html
- https://crbug.com/1162942
- https://crbug.com/1162942
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
Modified: 2025-02-05
CVE-2021-21148
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html
- http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html
- https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html
- https://crbug.com/1170176
- https://crbug.com/1170176
- FEDORA-2021-7fb30b9381
- FEDORA-2021-7fb30b9381
- FEDORA-2021-05afa65d39
- FEDORA-2021-05afa65d39
- GLSA-202104-08
- GLSA-202104-08
- DSA-4858
- DSA-4858
Modified: 2024-11-21
CVE-2023-1531
Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html
- https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html
- https://crbug.com/1415330
- https://crbug.com/1415330
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/
- https://security.gentoo.org/glsa/202309-17
- https://security.gentoo.org/glsa/202309-17
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1724
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1724
Closed bugs
/usr/lib64/chromium-gost/chromium: Нет такого файла или каталога