CVSS: 9.3EPSS: 5%CPEs: 7EXPL: 0CVE-2020-6559 – chromium-browser: Use after free in presentation API
https://notcve.org/view.php?id=CVE-2020-6559
27 Aug 2020 — Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso de la memoria previamente liberada en la API de presentación en Google Chrome versiones anteriores a 85.0.4183.83, permitía a un atacante remoto explotar una corrupción de la pila por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 85.0.4183.83. Issues ad... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html • CWE-416: Use After Free CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2020-6564 – chromium-browser: Incorrect security UI in permissions
https://notcve.org/view.php?id=CVE-2020-6564
27 Aug 2020 — Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page. Una implementación inapropiada en permissions en Google Chrome versiones anteriores a 85.0.4183.83, permitía a un atacante remoto falsificar el contenido de un diálogo de permisos por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 85.0.4183.83. I... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html • CWE-281: Improper Preservation of Permissions •
CVSS: 6.8EPSS: 1%CPEs: 7EXPL: 1CVE-2020-6569 – chromium-browser: Integer overflow in WebUSB
https://notcve.org/view.php?id=CVE-2020-6569
27 Aug 2020 — Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Un desbordamiento de enteros en WebUSB en Google Chrome versiones anteriores a 85.0.4183.83, permitía a un atacante remoto que había comprometido el proceso del renderizador potencialmente explotar una corrupción de la pila por medio de una página HTML diseñada Chromium is an open-source web browser, powered by We... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html • CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 1%CPEs: 7EXPL: 0CVE-2020-6560 – chromium-browser: Insufficient policy enforcement in autofill
https://notcve.org/view.php?id=CVE-2020-6560
27 Aug 2020 — Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Una aplicación insuficiente de la política en autofill en Google Chrome versiones anteriores a 85.0.4183.83, permitía a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 85.0.4183.83. Issues addressed include info... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html •
CVSS: 8.8EPSS: 1%CPEs: 7EXPL: 1CVE-2020-6571 – chromium-browser: Incorrect security UI in Omnibox
https://notcve.org/view.php?id=CVE-2020-6571
27 Aug 2020 — Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Una comprobación insuficiente de datos en Omnibox en Google Chrome versiones anteriores a 85.0.4183.83, permitía a un atacante remoto llevar a cabo una suplantación de dominio por medio de homógrafos de IDN mediante un nombre de dominio diseñado Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2020-6562 – chromium-browser: Insufficient policy enforcement in Blink
https://notcve.org/view.php?id=CVE-2020-6562
27 Aug 2020 — Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Una aplicación insuficiente de la política en Blink en Google Chrome versiones anteriores a 85.0.4183.83, permitía a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 85.0.4183.83. Issues addressed include informatio... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0CVE-2020-6568 – chromium-browser: Insufficient policy enforcement in intent handling
https://notcve.org/view.php?id=CVE-2020-6568
27 Aug 2020 — Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Una aplicación insuficiente de la política en el manejo de intent en Google Chrome en Android versiones anteriores a 85.0.4183.83, permitía a un atacante remoto omitir restricciones de navegación por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to ... • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2020-6546 – chromium-browser: Inappropriate implementation in installer
https://notcve.org/view.php?id=CVE-2020-6546
26 Aug 2020 — Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem. Una implementación inapropiada en installer en Google Chrome versiones anteriores a 84.0.4147.125, permitía a un atacante local elevar potencialmente los privilegios por medio de un sistema de archivos diseñado Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 84.0.4147.135. Issues addressed inc... • https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop.html • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 9.3EPSS: 2%CPEs: 5EXPL: 0CVE-2020-6556 – chromium-browser: Heap buffer overflow in SwiftShader
https://notcve.org/view.php?id=CVE-2020-6556
25 Aug 2020 — Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un desbordamiento del búfer de la pila en SwiftShader en Google Chrome versiones anteriores a 84.0.4147.135, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 84.0.4147.135. Issu... • http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 17%CPEs: 3EXPL: 1CVE-2020-6549 – chromium-browser: Use after free in media
https://notcve.org/view.php?id=CVE-2020-6549
12 Aug 2020 — Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso de la memoria previamente liberada en media en Google Chrome versiones anteriores a 84.0.4147.125, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 84.0.4147.135. Issues addressed in... • https://packetstorm.news/files/id/159558 • CWE-416: Use After Free CWE-787: Out-of-bounds Write •