rpm package
opensuse/opera&distro=openSUSE Leap 15.2 NonFree
pkg:rpm/opensuse/opera&distro=openSUSE%20Leap%2015.2%20NonFree
Vulnerabilities (227)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-6513 | — | < 70.0.3728.71-lp152.2.12.1 | 70.0.3728.71-lp152.2.12.1 | Jul 22, 2020 | Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. | ||
| CVE-2020-6512 | — | < 70.0.3728.71-lp152.2.12.1 | 70.0.3728.71-lp152.2.12.1 | Jul 22, 2020 | Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2020-6511 | — | < 70.0.3728.71-lp152.2.12.1 | 70.0.3728.71-lp152.2.12.1 | Jul 22, 2020 | Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page. | ||
| CVE-2020-6510 | — | < 70.0.3728.71-lp152.2.12.1 | 70.0.3728.71-lp152.2.12.1 | Jul 22, 2020 | Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2020-6509 | — | < 69.0.3686.49-lp152.2.9.1 | 69.0.3686.49-lp152.2.9.1 | Jul 22, 2020 | Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. | ||
| CVE-2020-6831 | — | < 68.0.3618.104-lp152.2.6.1 | 68.0.3618.104-lp152.2.6.1 | May 26, 2020 | A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0. | ||
| CVE-2020-6464 | — | < 68.0.3618.104-lp152.2.6.1 | 68.0.3618.104-lp152.2.6.1 | May 21, 2020 | Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
- CVE-2020-6513Jul 22, 2020affected < 70.0.3728.71-lp152.2.12.1fixed 70.0.3728.71-lp152.2.12.1
Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- CVE-2020-6512Jul 22, 2020affected < 70.0.3728.71-lp152.2.12.1fixed 70.0.3728.71-lp152.2.12.1
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2020-6511Jul 22, 2020affected < 70.0.3728.71-lp152.2.12.1fixed 70.0.3728.71-lp152.2.12.1
Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- CVE-2020-6510Jul 22, 2020affected < 70.0.3728.71-lp152.2.12.1fixed 70.0.3728.71-lp152.2.12.1
Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2020-6509Jul 22, 2020affected < 69.0.3686.49-lp152.2.9.1fixed 69.0.3686.49-lp152.2.9.1
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- CVE-2020-6831May 26, 2020affected < 68.0.3618.104-lp152.2.6.1fixed 68.0.3618.104-lp152.2.6.1
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
- CVE-2020-6464May 21, 2020affected < 68.0.3618.104-lp152.2.6.1fixed 68.0.3618.104-lp152.2.6.1
Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Page 12 of 12