rpm package

suse/chromium&distro=SUSE Package Hub 15 SP1

pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP1

Vulnerabilities (431)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2020-6438	Med	4.3	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.
CVE-2020-6437	Med	4.3	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.
CVE-2020-6436	Hig	8.8	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6435	Med	4.3	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6434	Hig	8.8	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6433	Med	4.3	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6432	Med	4.3	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6431	Med	4.3	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVE-2020-6430	Hig	8.8	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6423	Hig	8.8	< 81.0.4044.92-bp151.3.66.1	81.0.4044.92-bp151.3.66.1	Apr 13, 2020	Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6449	Hig	8.8	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6429	Hig	8.8	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6428	Hig	8.8	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6427	Hig	8.8	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6426	Med	6.5	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6425	Med	5.4	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
CVE-2020-6424	Hig	8.8	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6422	Hig	8.8	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 23, 2020	Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-20503	Med	6.5	< 80.0.3987.149-bp151.3.63.3	80.0.3987.149-bp151.3.63.3	Mar 6, 2020	usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
CVE-2020-0561	Hig	7.8	< 81.0.4044.129-bp151.3.75.1	81.0.4044.129-bp151.3.75.1	Feb 13, 2020	Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2020-6438MedApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.
CVE-2020-6437MedApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.
CVE-2020-6436HigApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6435MedApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6434HigApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6433MedApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6432MedApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6431MedApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVE-2020-6430HigApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6423HigApr 13, 2020
affected < 81.0.4044.92-bp151.3.66.1fixed 81.0.4044.92-bp151.3.66.1
Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6449HigMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6429HigMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6428HigMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6427HigMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6426MedMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6425MedMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
CVE-2020-6424HigMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6422HigMar 23, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-20503MedMar 6, 2020
affected < 80.0.3987.149-bp151.3.63.3fixed 80.0.3987.149-bp151.3.63.3
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
CVE-2020-0561HigFeb 13, 2020
affected < 81.0.4044.129-bp151.3.75.1fixed 81.0.4044.129-bp151.3.75.1
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Page 13 of 22