rpm package

suse/chromium&distro=SUSE Package Hub 15

pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015

Vulnerabilities (210)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2019-5880	Hig	7.4	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2019-5879	Med	6.5	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
CVE-2019-5878	Hig	8.8	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5877	Hig	8.8	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5876	Hig	8.8	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5875	Med	4.3	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2019-5874	Hig	8.8	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2019-5872	Med	6.5	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5871	Hig	8.8	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5870	Cri	9.6	< 77.0.3865.75-bp150.231.1	77.0.3865.75-bp150.231.1	Nov 25, 2019	Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2019-5868	Med	5.5	< 76.0.3809.100-bp150.223.1	76.0.3809.100-bp150.223.1	Nov 25, 2019	Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2019-5867	Med	6.5	< 76.0.3809.100-bp150.223.1	76.0.3809.100-bp150.223.1	Nov 25, 2019	Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5865	Med	6.5	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2019-5864	Med	4.3	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
CVE-2019-5862	Med	6.5	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2019-5861	Med	4.3	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
CVE-2019-5860	Med	5.5	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2019-5859	Hig	8.8	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2019-5858	Hig	8.8	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.
CVE-2019-5857	Med	6.5	< 76.0.3809.87-bp150.220.1	76.0.3809.87-bp150.220.1	Nov 25, 2019	Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

CVE-2019-5880HigNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2019-5879MedNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
CVE-2019-5878HigNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5877HigNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5876HigNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5875MedNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2019-5874HigNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2019-5872MedNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5871HigNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5870CriNov 25, 2019
affected < 77.0.3865.75-bp150.231.1fixed 77.0.3865.75-bp150.231.1
Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2019-5868MedNov 25, 2019
affected < 76.0.3809.100-bp150.223.1fixed 76.0.3809.100-bp150.223.1
Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2019-5867MedNov 25, 2019
affected < 76.0.3809.100-bp150.223.1fixed 76.0.3809.100-bp150.223.1
Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5865MedNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2019-5864MedNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
CVE-2019-5862MedNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2019-5861MedNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
CVE-2019-5860MedNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2019-5859HigNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2019-5858HigNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.
CVE-2019-5857MedNov 25, 2019
affected < 76.0.3809.87-bp150.220.1fixed 76.0.3809.87-bp150.220.1
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

Page 3 of 11