rpm package
suse/chromium&distro=SUSE Package Hub 15 SP1
pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP1
Vulnerabilities (431)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-5861 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page. | ||
| CVE-2019-5860 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. | ||
| CVE-2019-5859 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | ||
| CVE-2019-5858 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page. | ||
| CVE-2019-5857 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. | ||
| CVE-2019-5856 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. | ||
| CVE-2019-5855 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. | ||
| CVE-2019-5854 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. | ||
| CVE-2019-5853 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-5852 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | ||
| CVE-2019-5851 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-5850 | — | < 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 | Nov 25, 2019 | Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | ||
| CVE-2019-13724 | — | < 78.0.3904.108-bp151.3.31.1 | 78.0.3904.108-bp151.3.31.1 | Nov 25, 2019 | Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-13723 | — | < 78.0.3904.108-bp151.3.31.1 | 78.0.3904.108-bp151.3.31.1 | Nov 25, 2019 | Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-13720 | — | KEV | < 78.0.3904.87-bp151.3.25.1 | 78.0.3904.87-bp151.3.25.1 | Nov 25, 2019 | Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | |
| CVE-2019-13719 | — | < 78.0.3904.70-bp151.3.21.1 | 78.0.3904.70-bp151.3.21.1 | Nov 25, 2019 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. | ||
| CVE-2019-13718 | — | < 78.0.3904.70-bp151.3.21.1 | 78.0.3904.70-bp151.3.21.1 | Nov 25, 2019 | Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. | ||
| CVE-2019-13717 | — | < 78.0.3904.70-bp151.3.21.1 | 78.0.3904.70-bp151.3.21.1 | Nov 25, 2019 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. | ||
| CVE-2019-13716 | — | < 78.0.3904.70-bp151.3.21.1 | 78.0.3904.70-bp151.3.21.1 | Nov 25, 2019 | Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | ||
| CVE-2019-13715 | — | < 78.0.3904.70-bp151.3.21.1 | 78.0.3904.70-bp151.3.21.1 | Nov 25, 2019 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. |
- CVE-2019-5861Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- CVE-2019-5860Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- CVE-2019-5859Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- CVE-2019-5858Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.
- CVE-2019-5857Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
- CVE-2019-5856Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
- CVE-2019-5855Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- CVE-2019-5854Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- CVE-2019-5853Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-5852Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2019-5851Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-5850Nov 25, 2019affected < 76.0.3809.87-bp151.3.3.3fixed 76.0.3809.87-bp151.3.3.3
Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2019-13724Nov 25, 2019affected < 78.0.3904.108-bp151.3.31.1fixed 78.0.3904.108-bp151.3.31.1
Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-13723Nov 25, 2019affected < 78.0.3904.108-bp151.3.31.1fixed 78.0.3904.108-bp151.3.31.1
Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
- affected < 78.0.3904.87-bp151.3.25.1fixed 78.0.3904.87-bp151.3.25.1
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-13719Nov 25, 2019affected < 78.0.3904.70-bp151.3.21.1fixed 78.0.3904.70-bp151.3.21.1
Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.
- CVE-2019-13718Nov 25, 2019affected < 78.0.3904.70-bp151.3.21.1fixed 78.0.3904.70-bp151.3.21.1
Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
- CVE-2019-13717Nov 25, 2019affected < 78.0.3904.70-bp151.3.21.1fixed 78.0.3904.70-bp151.3.21.1
Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.
- CVE-2019-13716Nov 25, 2019affected < 78.0.3904.70-bp151.3.21.1fixed 78.0.3904.70-bp151.3.21.1
Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- CVE-2019-13715Nov 25, 2019affected < 78.0.3904.70-bp151.3.21.1fixed 78.0.3904.70-bp151.3.21.1
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Page 19 of 22