{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xmlsoft:libxslt:1.1.33:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBF9724E-ED48-45EB-92DF-1223ECF12693",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "8D305F7A-D159-4716-AB26-5E38BB5CD991",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed."
    },
    {
      "lang": "es",
      "value": "En la funci\u00f3n xsltCopyText en el archivo transform.c en libxslt versi\u00f3n 1.1.33, una variable de puntero no se restablece bajo determinadas circunstancias. Si el \u00e1rea de memoria relevante se liber\u00f3 y reutiliz\u00f3 de cierta manera, una comprobaci\u00f3n de l\u00edmites podr\u00eda fallar y podr\u00eda escribirse la memoria fuera de un b\u00fafer o podr\u00edan divulgarse datos no inicializados."
    }
  ],
  "id": "CVE-2019-18197",
  "lastModified": "2026-06-17T02:24:27.370",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-18197",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-05-28T18:27:54.888438Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2019-10-18T21:15:10.793",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/11/17/2"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://access.redhat.com/errata/RHSA-2020:0514"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00037.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20191031-0004/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security.netapp.com/advisory/ntap-20200416-0004/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/4164-1/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/11/17/2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2020:0514"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00037.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20191031-0004/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.netapp.com/advisory/ntap-20200416-0004/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/4164-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        },
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        },
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "nokogiri"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2019-18197"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416",
      "CWE-908"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-07-07T21:30:20Z",
    "nvd_published_at": "2019-10-18T21:15:00Z",
    "severity": "HIGH"
  },
  "details": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.\n\nNokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue.",
  "id": "GHSA-242x-7cm6-4w8j",
  "modified": "2026-06-09T10:22:03Z",
  "published": "2022-05-24T16:59:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18197"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sparklemotion/nokogiri/issues/1943"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2020:0514"
    },
    {
      "type": "WEB",
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746"
    },
    {
      "type": "WEB",
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768"
    },
    {
      "type": "WEB",
      "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-18197.yml"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/sparklemotion/nokogiri"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sparklemotion/nokogiri/blob/01ab95f3e37429ed8d3b380a8d2f73902eb325d9/CHANGELOG.md?plain=1#L934"
    },
    {
      "type": "WEB",
      "url": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00037.html"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20191031-0004"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20200416-0004"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4164-1"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2019/11/17/2"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability"
}

{
  "GSD": {
    "alias": "CVE-2019-18197",
    "description": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
    "id": "GSD-2019-18197",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-18197.html",
      "https://access.redhat.com/errata/RHSA-2020:4464",
      "https://access.redhat.com/errata/RHSA-2020:4005",
      "https://access.redhat.com/errata/RHSA-2020:0514",
      "https://ubuntu.com/security/CVE-2019-18197",
      "https://advisories.mageia.org/CVE-2019-18197.html",
      "https://security.archlinux.org/CVE-2019-18197",
      "https://alas.aws.amazon.com/cve/html/CVE-2019-18197.html",
      "https://linux.oracle.com/cve/CVE-2019-18197.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-18197"
      ],
      "details": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
      "id": "GSD-2019-18197",
      "modified": "2023-12-13T01:23:50.090076Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2019-18197",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285",
            "refsource": "MISC",
            "url": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285"
          },
          {
            "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914",
            "refsource": "MISC",
            "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914"
          },
          {
            "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768",
            "refsource": "MISC",
            "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768"
          },
          {
            "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746",
            "refsource": "MISC",
            "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746"
          },
          {
            "name": "USN-4164-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4164-1/"
          },
          {
            "name": "[debian-lts-announce] 20191027 [SECURITY] [DLA 1973-1] libxslt security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00037.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20191031-0004/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20191031-0004/"
          },
          {
            "name": "[oss-security] 20191117 Nokogiri security update v1.10.5",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2019/11/17/2"
          },
          {
            "name": "openSUSE-SU-2020:0189",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2020:0210",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html"
          },
          {
            "name": "RHSA-2020:0514",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2020:0514"
          },
          {
            "name": "openSUSE-SU-2020:0233",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20200416-0004/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20200416-0004/"
          },
          {
            "name": "openSUSE-SU-2020:0731",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003c1.10.5",
          "affected_versions": "All versions before 1.10.5",
          "cvss_v2": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-416",
            "CWE-908",
            "CWE-937"
          ],
          "date": "2019-12-23",
          "description": "In `xsltCopyText` in `transform.c` in libxslt, which is used by nokogiri, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
          "fixed_versions": [
            "1.10.5"
          ],
          "identifier": "CVE-2019-18197",
          "identifiers": [
            "CVE-2019-18197"
          ],
          "not_impacted": "All versions starting from 1.10.5",
          "package_slug": "gem/nokogiri",
          "pubdate": "2019-10-18",
          "solution": "Upgrade to version 1.10.5 or above.",
          "title": "Use After Free",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2019-18197"
          ],
          "uuid": "ecf64d0e-4f5c-4ebe-9f3f-c75ea81dc837"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:xmlsoft:libxslt:1.1.33:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18197"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-416"
                },
                {
                  "lang": "en",
                  "value": "CWE-908"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285"
            },
            {
              "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746"
            },
            {
              "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768"
            },
            {
              "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914"
            },
            {
              "name": "USN-4164-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://usn.ubuntu.com/4164-1/"
            },
            {
              "name": "[debian-lts-announce] 20191027 [SECURITY] [DLA 1973-1] libxslt security update",
              "refsource": "MLIST",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00037.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191031-0004/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20191031-0004/"
            },
            {
              "name": "[oss-security] 20191117 Nokogiri security update v1.10.5",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2019/11/17/2"
            },
            {
              "name": "openSUSE-SU-2020:0189",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html"
            },
            {
              "name": "openSUSE-SU-2020:0210",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html"
            },
            {
              "name": "RHSA-2020:0514",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2020:0514"
            },
            {
              "name": "openSUSE-SU-2020:0233",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html"
            },
            {
              "name": "N/A",
              "refsource": "N/A",
              "tags": [],
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200416-0004/",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://security.netapp.com/advisory/ntap-20200416-0004/"
            },
            {
              "name": "openSUSE-SU-2020:0731",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.6,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2020-08-24T17:37Z",
      "publishedDate": "2019-10-18T21:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for chromium",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for chromium fixes the following issues:\n\nChromium was updated to version 80.0.3987.87 (boo#1162833).\n\nSecurity issues fixed:\n\n- CVE-2020-6381: Integer overflow in JavaScript (boo#1162833).\n- CVE-2020-6382: Type Confusion in JavaScript (boo#1162833).\n- CVE-2019-18197: Multiple vulnerabilities in XML (boo#1162833).\n- CVE-2019-19926: Inappropriate implementation in SQLite (boo#1162833).\n- CVE-2020-6385: Insufficient policy enforcement in storage (boo#1162833).\n- CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite (boo#1162833).\n- CVE-2020-6387: Out of bounds write in WebRTC (boo#1162833).\n- CVE-2020-6388: Out of bounds memory access in WebAudio (boo#1162833).\n- CVE-2020-6389: Out of bounds write in WebRTC (boo#1162833).\n- CVE-2020-6390: Out of bounds memory access in streams (boo#1162833).\n- CVE-2020-6391: Insufficient validation of untrusted input in Blink (boo#1162833).\n- CVE-2020-6392: Insufficient policy enforcement in extensions (boo#1162833).\n- CVE-2020-6393: Insufficient policy enforcement in Blink (boo#1162833).\n- CVE-2020-6394: Insufficient policy enforcement in Blink (boo#1162833).\n- CVE-2020-6395: Out of bounds read in JavaScript (boo#1162833).\n- CVE-2020-6396: Inappropriate implementation in Skia (boo#1162833).\n- CVE-2020-6397: Incorrect security UI in sharing (boo#1162833).\n- CVE-2020-6398: Uninitialized use in PDFium (boo#1162833).\n- CVE-2020-6399: Insufficient policy enforcement in AppCache (boo#1162833).\n- CVE-2020-6400: Inappropriate implementation in CORS (boo#1162833).\n- CVE-2020-6401: Insufficient validation of untrusted input in Omnibox (boo#1162833).\n- CVE-2020-6402: Insufficient policy enforcement in downloads (boo#1162833).\n- CVE-2020-6403: Incorrect security UI in Omnibox (boo#1162833).\n- CVE-2020-6404: Inappropriate implementation in Blink (boo#1162833).\n- CVE-2020-6405: Out of bounds read in SQLite (boo#1162833).\n- CVE-2020-6406: Use after free in audio (boo#1162833).\n- CVE-2019-19923: Out of bounds memory access in SQLite (boo#1162833).\n- CVE-2020-6408: Insufficient policy enforcement in CORS (boo#1162833).\n- CVE-2020-6409: Inappropriate implementation in Omnibox (boo#1162833).\n- CVE-2020-6410: Insufficient policy enforcement in navigation (boo#1162833).\n- CVE-2020-6411: Insufficient validation of untrusted input in Omnibox (boo#1162833).\n- CVE-2020-6412: Insufficient validation of untrusted input in Omnibox (boo#1162833).\n- CVE-2020-6413: Inappropriate implementation in Blink (boo#1162833).\n- CVE-2020-6414: Insufficient policy enforcement in Safe Browsing (boo#1162833).\n- CVE-2020-6415: Inappropriate implementation in JavaScript (boo#1162833).\n- CVE-2020-6416: Insufficient data validation in streams (boo#1162833).\n- CVE-2020-6417: Inappropriate implementation in installer (boo#1162833).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-189",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0189-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:0189-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WSVRYLRPQE3DA7JXQF45EVKRHJ433WYL/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:0189-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WSVRYLRPQE3DA7JXQF45EVKRHJ433WYL/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1162833",
        "url": "https://bugzilla.suse.com/1162833"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18197 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18197/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19880 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19880/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19923 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19923/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19925 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19925/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19926 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19926/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6381 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6382 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6382/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6385 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6385/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6387 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6387/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6388 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6388/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6389 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6389/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6390 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6391 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6392 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6393 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6394 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6394/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6395 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6395/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6396 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6396/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6397 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6397/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6398 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6399 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6399/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6400 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6401 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6401/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6402 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6402/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6403 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6403/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6404 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6404/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6405 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6405/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6406 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6406/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6408 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6409 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6409/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6410 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6410/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6411 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6411/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6412 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6412/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6413 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6413/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6414 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6414/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6415 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6415/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6416 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6416/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6417 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6417/"
      }
    ],
    "title": "Security update for chromium",
    "tracking": {
      "current_release_date": "2020-02-08T23:11:40Z",
      "generator": {
        "date": "2020-02-08T23:11:40Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:0189-1",
      "initial_release_date": "2020-02-08T23:11:40Z",
      "revision_history": [
        {
          "date": "2020-02-08T23:11:40Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
                "product": {
                  "name": "chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
                  "product_id": "chromedriver-80.0.3987.87-lp151.2.63.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-80.0.3987.87-lp151.2.63.1.x86_64",
                "product": {
                  "name": "chromium-80.0.3987.87-lp151.2.63.1.x86_64",
                  "product_id": "chromium-80.0.3987.87-lp151.2.63.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-80.0.3987.87-lp151.2.63.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64"
        },
        "product_reference": "chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-80.0.3987.87-lp151.2.63.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        },
        "product_reference": "chromium-80.0.3987.87-lp151.2.63.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18197",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18197"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18197",
          "url": "https://www.suse.com/security/cve/CVE-2019-18197"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1154609 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1154609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157028 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1157028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1162833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1169511 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1169511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190108 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1190108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-18197"
    },
    {
      "cve": "CVE-2019-19880",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19880"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19880",
          "url": "https://www.suse.com/security/cve/CVE-2019-19880"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159491 for CVE-2019-19880",
          "url": "https://bugzilla.suse.com/1159491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159715 for CVE-2019-19880",
          "url": "https://bugzilla.suse.com/1159715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19880",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19880"
    },
    {
      "cve": "CVE-2019-19923",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19923"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19923",
          "url": "https://www.suse.com/security/cve/CVE-2019-19923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160309 for CVE-2019-19923",
          "url": "https://bugzilla.suse.com/1160309"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19923",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19923"
    },
    {
      "cve": "CVE-2019-19925",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19925"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19925",
          "url": "https://www.suse.com/security/cve/CVE-2019-19925"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159847 for CVE-2019-19925",
          "url": "https://bugzilla.suse.com/1159847"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19925",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-19925"
    },
    {
      "cve": "CVE-2019-19926",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19926"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19926",
          "url": "https://www.suse.com/security/cve/CVE-2019-19926"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159491 for CVE-2019-19926",
          "url": "https://bugzilla.suse.com/1159491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159715 for CVE-2019-19926",
          "url": "https://bugzilla.suse.com/1159715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19926",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19926"
    },
    {
      "cve": "CVE-2020-6381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6381",
          "url": "https://www.suse.com/security/cve/CVE-2020-6381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6381",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6381"
    },
    {
      "cve": "CVE-2020-6382",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6382"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6382",
          "url": "https://www.suse.com/security/cve/CVE-2020-6382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6382",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6382"
    },
    {
      "cve": "CVE-2020-6385",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6385"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6385",
          "url": "https://www.suse.com/security/cve/CVE-2020-6385"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6385",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6385"
    },
    {
      "cve": "CVE-2020-6387",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6387"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6387",
          "url": "https://www.suse.com/security/cve/CVE-2020-6387"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6387",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6387"
    },
    {
      "cve": "CVE-2020-6388",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6388"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6388",
          "url": "https://www.suse.com/security/cve/CVE-2020-6388"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6388",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6388"
    },
    {
      "cve": "CVE-2020-6389",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6389"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6389",
          "url": "https://www.suse.com/security/cve/CVE-2020-6389"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6389",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6389"
    },
    {
      "cve": "CVE-2020-6390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6390",
          "url": "https://www.suse.com/security/cve/CVE-2020-6390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6390",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6390"
    },
    {
      "cve": "CVE-2020-6391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6391",
          "url": "https://www.suse.com/security/cve/CVE-2020-6391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6391",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6391"
    },
    {
      "cve": "CVE-2020-6392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6392",
          "url": "https://www.suse.com/security/cve/CVE-2020-6392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6392",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6392"
    },
    {
      "cve": "CVE-2020-6393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6393",
          "url": "https://www.suse.com/security/cve/CVE-2020-6393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6393",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6393"
    },
    {
      "cve": "CVE-2020-6394",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6394"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6394",
          "url": "https://www.suse.com/security/cve/CVE-2020-6394"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6394",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6394"
    },
    {
      "cve": "CVE-2020-6395",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6395"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6395",
          "url": "https://www.suse.com/security/cve/CVE-2020-6395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6395",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6395"
    },
    {
      "cve": "CVE-2020-6396",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6396"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6396",
          "url": "https://www.suse.com/security/cve/CVE-2020-6396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6396",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6396"
    },
    {
      "cve": "CVE-2020-6397",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6397"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6397",
          "url": "https://www.suse.com/security/cve/CVE-2020-6397"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6397",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6397"
    },
    {
      "cve": "CVE-2020-6398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6398",
          "url": "https://www.suse.com/security/cve/CVE-2020-6398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6398",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6398"
    },
    {
      "cve": "CVE-2020-6399",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6399"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6399",
          "url": "https://www.suse.com/security/cve/CVE-2020-6399"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6399",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6399"
    },
    {
      "cve": "CVE-2020-6400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6400",
          "url": "https://www.suse.com/security/cve/CVE-2020-6400"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6400",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6400"
    },
    {
      "cve": "CVE-2020-6401",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6401"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6401",
          "url": "https://www.suse.com/security/cve/CVE-2020-6401"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6401",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6401"
    },
    {
      "cve": "CVE-2020-6402",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6402"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6402",
          "url": "https://www.suse.com/security/cve/CVE-2020-6402"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6402",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6402"
    },
    {
      "cve": "CVE-2020-6403",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6403"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6403",
          "url": "https://www.suse.com/security/cve/CVE-2020-6403"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6403",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6403"
    },
    {
      "cve": "CVE-2020-6404",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6404"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6404",
          "url": "https://www.suse.com/security/cve/CVE-2020-6404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6404",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6404"
    },
    {
      "cve": "CVE-2020-6405",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6405"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6405",
          "url": "https://www.suse.com/security/cve/CVE-2020-6405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6405",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6405"
    },
    {
      "cve": "CVE-2020-6406",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6406"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6406",
          "url": "https://www.suse.com/security/cve/CVE-2020-6406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6406",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6406"
    },
    {
      "cve": "CVE-2020-6408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6408",
          "url": "https://www.suse.com/security/cve/CVE-2020-6408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6408",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6408"
    },
    {
      "cve": "CVE-2020-6409",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6409"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6409",
          "url": "https://www.suse.com/security/cve/CVE-2020-6409"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6409",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6409"
    },
    {
      "cve": "CVE-2020-6410",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6410"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6410",
          "url": "https://www.suse.com/security/cve/CVE-2020-6410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6410",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6410"
    },
    {
      "cve": "CVE-2020-6411",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6411"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6411",
          "url": "https://www.suse.com/security/cve/CVE-2020-6411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6411",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6411"
    },
    {
      "cve": "CVE-2020-6412",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6412"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6412",
          "url": "https://www.suse.com/security/cve/CVE-2020-6412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6412",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6412"
    },
    {
      "cve": "CVE-2020-6413",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6413"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6413",
          "url": "https://www.suse.com/security/cve/CVE-2020-6413"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6413",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6413"
    },
    {
      "cve": "CVE-2020-6414",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6414"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6414",
          "url": "https://www.suse.com/security/cve/CVE-2020-6414"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6414",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6414"
    },
    {
      "cve": "CVE-2020-6415",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6415"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6415",
          "url": "https://www.suse.com/security/cve/CVE-2020-6415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6415",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6415"
    },
    {
      "cve": "CVE-2020-6416",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6416"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6416",
          "url": "https://www.suse.com/security/cve/CVE-2020-6416"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6416",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6416"
    },
    {
      "cve": "CVE-2020-6417",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6417"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
          "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6417",
          "url": "https://www.suse.com/security/cve/CVE-2020-6417"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6417",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:chromedriver-80.0.3987.87-lp151.2.63.1.x86_64",
            "openSUSE Leap 15.1:chromium-80.0.3987.87-lp151.2.63.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-08T23:11:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6417"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for chromium",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for chromium fixes the following issues:\n\nChromium was updated to version 80.0.3987.87 (boo#1162833).\n\nSecurity issues fixed:\n\n- CVE-2020-6381: Integer overflow in JavaScript (boo#1162833).\n- CVE-2020-6382: Type Confusion in JavaScript (boo#1162833).\n- CVE-2019-18197: Multiple vulnerabilities in XML (boo#1162833).\n- CVE-2019-19926: Inappropriate implementation in SQLite (boo#1162833).\n- CVE-2020-6385: Insufficient policy enforcement in storage (boo#1162833).\n- CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite (boo#1162833).\n- CVE-2020-6387: Out of bounds write in WebRTC (boo#1162833).\n- CVE-2020-6388: Out of bounds memory access in WebAudio (boo#1162833).\n- CVE-2020-6389: Out of bounds write in WebRTC (boo#1162833).\n- CVE-2020-6390: Out of bounds memory access in streams (boo#1162833).\n- CVE-2020-6391: Insufficient validation of untrusted input in Blink (boo#1162833).\n- CVE-2020-6392: Insufficient policy enforcement in extensions (boo#1162833).\n- CVE-2020-6393: Insufficient policy enforcement in Blink (boo#1162833).\n- CVE-2020-6394: Insufficient policy enforcement in Blink (boo#1162833).\n- CVE-2020-6395: Out of bounds read in JavaScript (boo#1162833).\n- CVE-2020-6396: Inappropriate implementation in Skia (boo#1162833).\n- CVE-2020-6397: Incorrect security UI in sharing (boo#1162833).\n- CVE-2020-6398: Uninitialized use in PDFium (boo#1162833).\n- CVE-2020-6399: Insufficient policy enforcement in AppCache (boo#1162833).\n- CVE-2020-6400: Inappropriate implementation in CORS (boo#1162833).\n- CVE-2020-6401: Insufficient validation of untrusted input in Omnibox (boo#1162833).\n- CVE-2020-6402: Insufficient policy enforcement in downloads (boo#1162833).\n- CVE-2020-6403: Incorrect security UI in Omnibox (boo#1162833).\n- CVE-2020-6404: Inappropriate implementation in Blink (boo#1162833).\n- CVE-2020-6405: Out of bounds read in SQLite (boo#1162833).\n- CVE-2020-6406: Use after free in audio (boo#1162833).\n- CVE-2019-19923: Out of bounds memory access in SQLite (boo#1162833).\n- CVE-2020-6408: Insufficient policy enforcement in CORS (boo#1162833).\n- CVE-2020-6409: Inappropriate implementation in Omnibox (boo#1162833).\n- CVE-2020-6410: Insufficient policy enforcement in navigation (boo#1162833).\n- CVE-2020-6411: Insufficient validation of untrusted input in Omnibox (boo#1162833).\n- CVE-2020-6412: Insufficient validation of untrusted input in Omnibox (boo#1162833).\n- CVE-2020-6413: Inappropriate implementation in Blink (boo#1162833).\n- CVE-2020-6414: Insufficient policy enforcement in Safe Browsing (boo#1162833).\n- CVE-2020-6415: Inappropriate implementation in JavaScript (boo#1162833).\n- CVE-2020-6416: Insufficient data validation in streams (boo#1162833).\n- CVE-2020-6417: Inappropriate implementation in installer (boo#1162833).\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-210",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0210-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:0210-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AAOUMLFZMVYH6TYWJSSQ6OXQGLVPDPJ6/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:0210-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AAOUMLFZMVYH6TYWJSSQ6OXQGLVPDPJ6/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1162833",
        "url": "https://bugzilla.suse.com/1162833"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18197 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18197/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19880 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19880/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19923 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19923/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19925 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19925/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19926 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19926/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6381 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6382 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6382/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6385 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6385/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6387 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6387/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6388 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6388/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6389 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6389/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6390 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6391 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6392 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6393 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6394 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6394/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6395 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6395/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6396 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6396/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6397 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6397/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6398 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6399 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6399/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6400 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6401 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6401/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6402 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6402/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6403 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6403/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6404 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6404/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6405 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6405/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6406 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6406/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6408 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6409 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6409/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6410 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6410/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6411 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6411/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6412 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6412/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6413 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6413/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6414 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6414/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6415 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6415/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6416 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6416/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-6417 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-6417/"
      }
    ],
    "title": "Security update for chromium",
    "tracking": {
      "current_release_date": "2020-02-12T05:12:32Z",
      "generator": {
        "date": "2020-02-12T05:12:32Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:0210-1",
      "initial_release_date": "2020-02-12T05:12:32Z",
      "revision_history": [
        {
          "date": "2020-02-12T05:12:32Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
                "product": {
                  "name": "chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
                  "product_id": "chromedriver-80.0.3987.87-bp151.3.59.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-80.0.3987.87-bp151.3.59.1.aarch64",
                "product": {
                  "name": "chromium-80.0.3987.87-bp151.3.59.1.aarch64",
                  "product_id": "chromium-80.0.3987.87-bp151.3.59.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
                "product": {
                  "name": "chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
                  "product_id": "chromedriver-80.0.3987.87-bp151.3.59.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-80.0.3987.87-bp151.3.59.1.x86_64",
                "product": {
                  "name": "chromium-80.0.3987.87-bp151.3.59.1.x86_64",
                  "product_id": "chromium-80.0.3987.87-bp151.3.59.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP1",
                "product": {
                  "name": "SUSE Package Hub 15 SP1",
                  "product_id": "SUSE Package Hub 15 SP1"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-80.0.3987.87-bp151.3.59.1.aarch64 as component of SUSE Package Hub 15 SP1",
          "product_id": "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64"
        },
        "product_reference": "chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-80.0.3987.87-bp151.3.59.1.x86_64 as component of SUSE Package Hub 15 SP1",
          "product_id": "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64"
        },
        "product_reference": "chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-80.0.3987.87-bp151.3.59.1.aarch64 as component of SUSE Package Hub 15 SP1",
          "product_id": "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64"
        },
        "product_reference": "chromium-80.0.3987.87-bp151.3.59.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-80.0.3987.87-bp151.3.59.1.x86_64 as component of SUSE Package Hub 15 SP1",
          "product_id": "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        },
        "product_reference": "chromium-80.0.3987.87-bp151.3.59.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-18197",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18197"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn\u0027t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18197",
          "url": "https://www.suse.com/security/cve/CVE-2019-18197"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1154609 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1154609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157028 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1157028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1162833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1169511 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1169511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190108 for CVE-2019-18197",
          "url": "https://bugzilla.suse.com/1190108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-18197"
    },
    {
      "cve": "CVE-2019-19880",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19880"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19880",
          "url": "https://www.suse.com/security/cve/CVE-2019-19880"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159491 for CVE-2019-19880",
          "url": "https://bugzilla.suse.com/1159491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159715 for CVE-2019-19880",
          "url": "https://bugzilla.suse.com/1159715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19880",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19880"
    },
    {
      "cve": "CVE-2019-19923",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19923"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19923",
          "url": "https://www.suse.com/security/cve/CVE-2019-19923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160309 for CVE-2019-19923",
          "url": "https://bugzilla.suse.com/1160309"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19923",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19923"
    },
    {
      "cve": "CVE-2019-19925",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19925"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19925",
          "url": "https://www.suse.com/security/cve/CVE-2019-19925"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159847 for CVE-2019-19925",
          "url": "https://bugzilla.suse.com/1159847"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19925",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-19925"
    },
    {
      "cve": "CVE-2019-19926",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19926"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19926",
          "url": "https://www.suse.com/security/cve/CVE-2019-19926"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159491 for CVE-2019-19926",
          "url": "https://bugzilla.suse.com/1159491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159715 for CVE-2019-19926",
          "url": "https://bugzilla.suse.com/1159715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2019-19926",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19926"
    },
    {
      "cve": "CVE-2020-6381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6381",
          "url": "https://www.suse.com/security/cve/CVE-2020-6381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6381",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6381"
    },
    {
      "cve": "CVE-2020-6382",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6382"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6382",
          "url": "https://www.suse.com/security/cve/CVE-2020-6382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6382",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6382"
    },
    {
      "cve": "CVE-2020-6385",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6385"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6385",
          "url": "https://www.suse.com/security/cve/CVE-2020-6385"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6385",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6385"
    },
    {
      "cve": "CVE-2020-6387",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6387"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6387",
          "url": "https://www.suse.com/security/cve/CVE-2020-6387"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6387",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6387"
    },
    {
      "cve": "CVE-2020-6388",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6388"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6388",
          "url": "https://www.suse.com/security/cve/CVE-2020-6388"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6388",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6388"
    },
    {
      "cve": "CVE-2020-6389",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6389"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6389",
          "url": "https://www.suse.com/security/cve/CVE-2020-6389"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6389",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6389"
    },
    {
      "cve": "CVE-2020-6390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6390",
          "url": "https://www.suse.com/security/cve/CVE-2020-6390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6390",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6390"
    },
    {
      "cve": "CVE-2020-6391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6391",
          "url": "https://www.suse.com/security/cve/CVE-2020-6391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6391",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6391"
    },
    {
      "cve": "CVE-2020-6392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6392",
          "url": "https://www.suse.com/security/cve/CVE-2020-6392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6392",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6392"
    },
    {
      "cve": "CVE-2020-6393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6393",
          "url": "https://www.suse.com/security/cve/CVE-2020-6393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6393",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6393"
    },
    {
      "cve": "CVE-2020-6394",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6394"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6394",
          "url": "https://www.suse.com/security/cve/CVE-2020-6394"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6394",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6394"
    },
    {
      "cve": "CVE-2020-6395",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6395"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6395",
          "url": "https://www.suse.com/security/cve/CVE-2020-6395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6395",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6395"
    },
    {
      "cve": "CVE-2020-6396",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6396"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6396",
          "url": "https://www.suse.com/security/cve/CVE-2020-6396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6396",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6396"
    },
    {
      "cve": "CVE-2020-6397",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6397"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6397",
          "url": "https://www.suse.com/security/cve/CVE-2020-6397"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6397",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6397"
    },
    {
      "cve": "CVE-2020-6398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6398",
          "url": "https://www.suse.com/security/cve/CVE-2020-6398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6398",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6398"
    },
    {
      "cve": "CVE-2020-6399",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6399"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6399",
          "url": "https://www.suse.com/security/cve/CVE-2020-6399"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6399",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6399"
    },
    {
      "cve": "CVE-2020-6400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6400",
          "url": "https://www.suse.com/security/cve/CVE-2020-6400"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6400",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6400"
    },
    {
      "cve": "CVE-2020-6401",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6401"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6401",
          "url": "https://www.suse.com/security/cve/CVE-2020-6401"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6401",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6401"
    },
    {
      "cve": "CVE-2020-6402",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6402"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6402",
          "url": "https://www.suse.com/security/cve/CVE-2020-6402"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6402",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6402"
    },
    {
      "cve": "CVE-2020-6403",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6403"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6403",
          "url": "https://www.suse.com/security/cve/CVE-2020-6403"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6403",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6403"
    },
    {
      "cve": "CVE-2020-6404",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6404"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6404",
          "url": "https://www.suse.com/security/cve/CVE-2020-6404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6404",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6404"
    },
    {
      "cve": "CVE-2020-6405",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6405"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6405",
          "url": "https://www.suse.com/security/cve/CVE-2020-6405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6405",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6405"
    },
    {
      "cve": "CVE-2020-6406",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6406"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6406",
          "url": "https://www.suse.com/security/cve/CVE-2020-6406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6406",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6406"
    },
    {
      "cve": "CVE-2020-6408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6408",
          "url": "https://www.suse.com/security/cve/CVE-2020-6408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6408",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6408"
    },
    {
      "cve": "CVE-2020-6409",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6409"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6409",
          "url": "https://www.suse.com/security/cve/CVE-2020-6409"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6409",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6409"
    },
    {
      "cve": "CVE-2020-6410",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6410"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6410",
          "url": "https://www.suse.com/security/cve/CVE-2020-6410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6410",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6410"
    },
    {
      "cve": "CVE-2020-6411",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6411"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6411",
          "url": "https://www.suse.com/security/cve/CVE-2020-6411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6411",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6411"
    },
    {
      "cve": "CVE-2020-6412",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6412"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6412",
          "url": "https://www.suse.com/security/cve/CVE-2020-6412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6412",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6412"
    },
    {
      "cve": "CVE-2020-6413",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6413"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6413",
          "url": "https://www.suse.com/security/cve/CVE-2020-6413"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6413",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6413"
    },
    {
      "cve": "CVE-2020-6414",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6414"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6414",
          "url": "https://www.suse.com/security/cve/CVE-2020-6414"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6414",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6414"
    },
    {
      "cve": "CVE-2020-6415",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6415"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6415",
          "url": "https://www.suse.com/security/cve/CVE-2020-6415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6415",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6415"
    },
    {
      "cve": "CVE-2020-6416",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6416"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6416",
          "url": "https://www.suse.com/security/cve/CVE-2020-6416"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6416",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6416"
    },
    {
      "cve": "CVE-2020-6417",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-6417"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
          "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-6417",
          "url": "https://www.suse.com/security/cve/CVE-2020-6417"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162833 for CVE-2020-6417",
          "url": "https://bugzilla.suse.com/1162833"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromedriver-80.0.3987.87-bp151.3.59.1.x86_64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.aarch64",
            "SUSE Package Hub 15 SP1:chromium-80.0.3987.87-bp151.3.59.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-02-12T05:12:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-6417"
    }
  ]
}