rpm package

suse/chromium&distro=SUSE Package Hub 15 SP1

pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP1

Vulnerabilities (431)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2021-21141	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.
CVE-2021-21140	Med	6.8	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.
CVE-2021-21139	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2021-21138	Hig	8.6	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.
CVE-2021-21137	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
CVE-2021-21136	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-21135	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-21134	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVE-2021-21133	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.
CVE-2021-21132	Cri	9.6	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
CVE-2021-21131	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21130	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21129	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21128	Hig	8.8	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21127	Hig	8.8	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.
CVE-2021-21126	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
CVE-2021-21125	Hig	8.1	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21124	Cri	9.6	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21123	Med	6.5	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21122	Hig	8.8	< 88.0.4324.96-bp151.3.156.1	88.0.4324.96-bp151.3.156.1	Feb 9, 2021	Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21141MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.
CVE-2021-21140MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.
CVE-2021-21139MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2021-21138HigFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.
CVE-2021-21137MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
CVE-2021-21136MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-21135MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-21134MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVE-2021-21133MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.
CVE-2021-21132CriFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
CVE-2021-21131MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21130MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21129MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21128HigFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21127HigFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.
CVE-2021-21126MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
CVE-2021-21125HigFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21124CriFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21123MedFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVE-2021-21122HigFeb 9, 2021
affected < 88.0.4324.96-bp151.3.156.1fixed 88.0.4324.96-bp151.3.156.1
Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Page 1 of 22