csaf_redhat - rhsa-2020

rhsa-2020_2544

Vulnerability from csaf_redhat

Published

2020-06-15 12:55

Modified

2024-11-15 09:34

Summary

Red Hat Security Advisory: chromium-browser security update

Notes

Topic

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 83.0.4103.97. Security Fix(es): * chromium-browser: Use after free in reader mode (CVE-2020-6465) * chromium-browser: Use after free in media (CVE-2020-6466) * chromium-browser: Use after free in WebRTC (CVE-2020-6467) * chromium-browser: Type Confusion in V8 (CVE-2020-6468) * chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6469) * chromium-browser: Use after free in WebAuthentication (CVE-2020-6493) * chromium-browser: Incorrect security UI in payments (CVE-2020-6494) * chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6495) * chromium-browser: Use after free in payments (CVE-2020-6496) * chromium-browser: Insufficient validation of untrusted input in clipboard (CVE-2020-6470) * chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6471) * chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6472) * chromium-browser: Insufficient policy enforcement in Blink (CVE-2020-6473) * chromium-browser: Use after free in Blink (CVE-2020-6474) * chromium-browser: Incorrect security UI in full screen (CVE-2020-6475) * chromium-browser: Insufficient policy enforcement in tab strip (CVE-2020-6476) * chromium-browser: Inappropriate implementation in full screen (CVE-2020-6478) * chromium-browser: Inappropriate implementation in sharing (CVE-2020-6479) * chromium-browser: Insufficient policy enforcement in enterprise (CVE-2020-6480) * chromium-browser: Insufficient policy enforcement in URL formatting (CVE-2020-6481) * chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6482) * chromium-browser: Insufficient policy enforcement in payments (CVE-2020-6483) * chromium-browser: Insufficient data validation in ChromeDriver (CVE-2020-6484) * chromium-browser: Insufficient data validation in media router (CVE-2020-6485) * chromium-browser: Insufficient policy enforcement in navigations (CVE-2020-6486) * chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-6487) * chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-6488) * chromium-browser: Inappropriate implementation in developer tools (CVE-2020-6489) * chromium-browser: Insufficient data validation in loader (CVE-2020-6490) * chromium-browser: Incorrect security UI in site information (CVE-2020-6491) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 83.0.4103.97.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in reader mode (CVE-2020-6465)\n\n* chromium-browser: Use after free in media (CVE-2020-6466)\n\n* chromium-browser: Use after free in WebRTC (CVE-2020-6467)\n\n* chromium-browser: Type Confusion in V8 (CVE-2020-6468)\n\n* chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6469)\n\n* chromium-browser: Use after free in WebAuthentication (CVE-2020-6493)\n\n* chromium-browser: Incorrect security UI in payments (CVE-2020-6494)\n\n* chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6495)\n\n* chromium-browser: Use after free in payments (CVE-2020-6496)\n\n* chromium-browser: Insufficient validation of untrusted input in clipboard (CVE-2020-6470)\n\n* chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6471)\n\n* chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6472)\n\n* chromium-browser: Insufficient policy enforcement in Blink (CVE-2020-6473)\n\n* chromium-browser: Use after free in Blink (CVE-2020-6474)\n\n* chromium-browser: Incorrect security UI in full screen (CVE-2020-6475)\n\n* chromium-browser: Insufficient policy enforcement in tab strip (CVE-2020-6476)\n\n* chromium-browser: Inappropriate implementation in full screen (CVE-2020-6478)\n\n* chromium-browser: Inappropriate implementation in sharing (CVE-2020-6479)\n\n* chromium-browser: Insufficient policy enforcement in enterprise (CVE-2020-6480)\n\n* chromium-browser: Insufficient policy enforcement in URL formatting (CVE-2020-6481)\n\n* chromium-browser: Insufficient policy enforcement in developer tools (CVE-2020-6482)\n\n* chromium-browser: Insufficient policy enforcement in payments (CVE-2020-6483)\n\n* chromium-browser: Insufficient data validation in ChromeDriver (CVE-2020-6484)\n\n* chromium-browser: Insufficient data validation in media router (CVE-2020-6485)\n\n* chromium-browser: Insufficient policy enforcement in navigations (CVE-2020-6486)\n\n* chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-6487)\n\n* chromium-browser: Insufficient policy enforcement in downloads (CVE-2020-6488)\n\n* chromium-browser: Inappropriate implementation in developer tools (CVE-2020-6489)\n\n* chromium-browser: Insufficient data validation in loader (CVE-2020-6490)\n\n* chromium-browser: Incorrect security UI in site information (CVE-2020-6491)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2020:2544",
            url: "https://access.redhat.com/errata/RHSA-2020:2544",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#important",
            url: "https://access.redhat.com/security/updates/classification/#important",
         },
         {
            category: "external",
            summary: "1837877",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837877",
         },
         {
            category: "external",
            summary: "1837878",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837878",
         },
         {
            category: "external",
            summary: "1837879",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837879",
         },
         {
            category: "external",
            summary: "1837880",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837880",
         },
         {
            category: "external",
            summary: "1837882",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837882",
         },
         {
            category: "external",
            summary: "1837883",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837883",
         },
         {
            category: "external",
            summary: "1837884",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837884",
         },
         {
            category: "external",
            summary: "1837885",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837885",
         },
         {
            category: "external",
            summary: "1837886",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837886",
         },
         {
            category: "external",
            summary: "1837887",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837887",
         },
         {
            category: "external",
            summary: "1837889",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837889",
         },
         {
            category: "external",
            summary: "1837890",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837890",
         },
         {
            category: "external",
            summary: "1837891",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837891",
         },
         {
            category: "external",
            summary: "1837892",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837892",
         },
         {
            category: "external",
            summary: "1837893",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837893",
         },
         {
            category: "external",
            summary: "1837894",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837894",
         },
         {
            category: "external",
            summary: "1837896",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837896",
         },
         {
            category: "external",
            summary: "1837897",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837897",
         },
         {
            category: "external",
            summary: "1837898",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837898",
         },
         {
            category: "external",
            summary: "1837899",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837899",
         },
         {
            category: "external",
            summary: "1837900",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837900",
         },
         {
            category: "external",
            summary: "1837901",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837901",
         },
         {
            category: "external",
            summary: "1837902",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837902",
         },
         {
            category: "external",
            summary: "1837907",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837907",
         },
         {
            category: "external",
            summary: "1837912",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837912",
         },
         {
            category: "external",
            summary: "1837927",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837927",
         },
         {
            category: "external",
            summary: "1844554",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844554",
         },
         {
            category: "external",
            summary: "1844555",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844555",
         },
         {
            category: "external",
            summary: "1844556",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844556",
         },
         {
            category: "external",
            summary: "1844557",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844557",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2544.json",
         },
      ],
      title: "Red Hat Security Advisory: chromium-browser security update",
      tracking: {
         current_release_date: "2024-11-15T09:34:50+00:00",
         generator: {
            date: "2024-11-15T09:34:50+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2020:2544",
         initial_release_date: "2020-06-15T12:55:31+00:00",
         revision_history: [
            {
               date: "2020-06-15T12:55:31+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2020-06-15T12:55:31+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-15T09:34:50+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                           product_id: "6Client-Supplementary-6.10.z",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:rhel_extras:6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                           product_id: "6ComputeNode-Supplementary-6.10.z",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:rhel_extras:6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                           product_id: "6Server-Supplementary-6.10.z",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:rhel_extras:6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                        product: {
                           name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                           product_id: "6Workstation-Supplementary-6.10.z",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:rhel_extras:6",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux Supplementary",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                        product: {
                           name: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                           product_id: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/chromium-browser@83.0.4103.97-1.el6_10?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                        product: {
                           name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                           product_id: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/chromium-browser-debuginfo@83.0.4103.97-1.el6_10?arch=i686",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                        product: {
                           name: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                           product_id: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/chromium-browser@83.0.4103.97-1.el6_10?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                        product: {
                           name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                           product_id: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/chromium-browser-debuginfo@83.0.4103.97-1.el6_10?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
               product_id: "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6Client-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
               product_id: "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6Client-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
               product_id: "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6Client-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
               product_id: "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6Client-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
               product_id: "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6ComputeNode-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
               product_id: "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6ComputeNode-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
               product_id: "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6ComputeNode-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
               product_id: "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6ComputeNode-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
               product_id: "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6Server-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
               product_id: "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6Server-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
               product_id: "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6Server-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
               product_id: "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6Server-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
               product_id: "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6Workstation-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
               product_id: "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6Workstation-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
               product_id: "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
            relates_to_product_reference: "6Workstation-Supplementary-6.10.z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
               product_id: "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            },
            product_reference: "chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            relates_to_product_reference: "6Workstation-Supplementary-6.10.z",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2020-6465",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837877",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Use after free in reader mode",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6465",
            },
            {
               category: "external",
               summary: "RHBZ#1837877",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837877",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6465",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6465",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6465",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6465",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Use after free in reader mode",
      },
      {
         cve: "CVE-2020-6466",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837878",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Use after free in media",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6466",
            },
            {
               category: "external",
               summary: "RHBZ#1837878",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837878",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6466",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6466",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6466",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6466",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Use after free in media",
      },
      {
         cve: "CVE-2020-6467",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837879",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Use after free in WebRTC",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6467",
            },
            {
               category: "external",
               summary: "RHBZ#1837879",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837879",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6467",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6467",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6467",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6467",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Use after free in WebRTC",
      },
      {
         cve: "CVE-2020-6468",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837880",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Type Confusion in V8",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6468",
            },
            {
               category: "external",
               summary: "RHBZ#1837880",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837880",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6468",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6468",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6468",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6468",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Type Confusion in V8",
      },
      {
         cve: "CVE-2020-6469",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837907",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in developer tools",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6469",
            },
            {
               category: "external",
               summary: "RHBZ#1837907",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837907",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6469",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6469",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6469",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6469",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in developer tools",
      },
      {
         cve: "CVE-2020-6470",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837882",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient validation of untrusted input in clipboard",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6470",
            },
            {
               category: "external",
               summary: "RHBZ#1837882",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837882",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6470",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6470",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6470",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6470",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient validation of untrusted input in clipboard",
      },
      {
         cve: "CVE-2020-6471",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837883",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in developer tools",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6471",
            },
            {
               category: "external",
               summary: "RHBZ#1837883",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837883",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6471",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6471",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6471",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6471",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in developer tools",
      },
      {
         cve: "CVE-2020-6472",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837884",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in developer tools",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6472",
            },
            {
               category: "external",
               summary: "RHBZ#1837884",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837884",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6472",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6472",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6472",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6472",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in developer tools",
      },
      {
         cve: "CVE-2020-6473",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837885",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in Blink",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6473",
            },
            {
               category: "external",
               summary: "RHBZ#1837885",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837885",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6473",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6473",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6473",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6473",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in Blink",
      },
      {
         cve: "CVE-2020-6474",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837886",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Use after free in Blink",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6474",
            },
            {
               category: "external",
               summary: "RHBZ#1837886",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837886",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6474",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6474",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6474",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6474",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Use after free in Blink",
      },
      {
         cve: "CVE-2020-6475",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837887",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Incorrect security UI in full screen",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6475",
            },
            {
               category: "external",
               summary: "RHBZ#1837887",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837887",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6475",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6475",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6475",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6475",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Incorrect security UI in full screen",
      },
      {
         cve: "CVE-2020-6476",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837912",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in tab strip",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6476",
            },
            {
               category: "external",
               summary: "RHBZ#1837912",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837912",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6476",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6476",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6476",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6476",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in tab strip",
      },
      {
         cve: "CVE-2020-6478",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837889",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Inappropriate implementation in full screen",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6478",
            },
            {
               category: "external",
               summary: "RHBZ#1837889",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837889",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6478",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6478",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6478",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6478",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Inappropriate implementation in full screen",
      },
      {
         cve: "CVE-2020-6479",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837927",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Inappropriate implementation in sharing",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6479",
            },
            {
               category: "external",
               summary: "RHBZ#1837927",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837927",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6479",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6479",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6479",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6479",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Inappropriate implementation in sharing",
      },
      {
         cve: "CVE-2020-6480",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837890",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in enterprise",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6480",
            },
            {
               category: "external",
               summary: "RHBZ#1837890",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837890",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6480",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6480",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6480",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6480",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in enterprise",
      },
      {
         cve: "CVE-2020-6481",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837891",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in URL formatting",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6481",
            },
            {
               category: "external",
               summary: "RHBZ#1837891",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837891",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6481",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6481",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6481",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6481",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in URL formatting",
      },
      {
         cve: "CVE-2020-6482",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837892",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in developer tools",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6482",
            },
            {
               category: "external",
               summary: "RHBZ#1837892",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837892",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6482",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6482",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6482",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6482",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in developer tools",
      },
      {
         cve: "CVE-2020-6483",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837893",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in payments",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6483",
            },
            {
               category: "external",
               summary: "RHBZ#1837893",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837893",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6483",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6483",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6483",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6483",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in payments",
      },
      {
         cve: "CVE-2020-6484",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837894",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient data validation in ChromeDriver",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6484",
            },
            {
               category: "external",
               summary: "RHBZ#1837894",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837894",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6484",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6484",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6484",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6484",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient data validation in ChromeDriver",
      },
      {
         cve: "CVE-2020-6485",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837896",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient data validation in media router",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6485",
            },
            {
               category: "external",
               summary: "RHBZ#1837896",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837896",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6485",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6485",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6485",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6485",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient data validation in media router",
      },
      {
         cve: "CVE-2020-6486",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837897",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in navigations",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6486",
            },
            {
               category: "external",
               summary: "RHBZ#1837897",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837897",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6486",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6486",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6486",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6486",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in navigations",
      },
      {
         cve: "CVE-2020-6487",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837898",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in downloads",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6487",
            },
            {
               category: "external",
               summary: "RHBZ#1837898",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837898",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6487",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6487",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6487",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6487",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in downloads",
      },
      {
         cve: "CVE-2020-6488",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837899",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in downloads",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6488",
            },
            {
               category: "external",
               summary: "RHBZ#1837899",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837899",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6488",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6488",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6488",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6488",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in downloads",
      },
      {
         cve: "CVE-2020-6489",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837900",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Inappropriate implementation in developer tools",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6489",
            },
            {
               category: "external",
               summary: "RHBZ#1837900",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837900",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6489",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6489",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6489",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6489",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "chromium-browser: Inappropriate implementation in developer tools",
      },
      {
         cve: "CVE-2020-6490",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837901",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient data validation in loader",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6490",
            },
            {
               category: "external",
               summary: "RHBZ#1837901",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837901",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6490",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6490",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6490",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6490",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "chromium-browser: Insufficient data validation in loader",
      },
      {
         cve: "CVE-2020-6491",
         discovery_date: "2020-05-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1837902",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Incorrect security UI in site information",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6491",
            },
            {
               category: "external",
               summary: "RHBZ#1837902",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1837902",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6491",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6491",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6491",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6491",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
         ],
         release_date: "2020-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "chromium-browser: Incorrect security UI in site information",
      },
      {
         cve: "CVE-2020-6493",
         discovery_date: "2020-06-04T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1844554",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Use after free in WebAuthentication",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6493",
            },
            {
               category: "external",
               summary: "RHBZ#1844554",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844554",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6493",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6493",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6493",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6493",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
         ],
         release_date: "2020-06-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Use after free in WebAuthentication",
      },
      {
         cve: "CVE-2020-6494",
         discovery_date: "2020-06-04T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1844555",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Incorrect security UI in payments",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6494",
            },
            {
               category: "external",
               summary: "RHBZ#1844555",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844555",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6494",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6494",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6494",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6494",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
         ],
         release_date: "2020-06-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Incorrect security UI in payments",
      },
      {
         cve: "CVE-2020-6495",
         discovery_date: "2020-06-04T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1844556",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Insufficient policy enforcement in developer tools",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6495",
            },
            {
               category: "external",
               summary: "RHBZ#1844556",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844556",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6495",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6495",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6495",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6495",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
         ],
         release_date: "2020-06-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Insufficient policy enforcement in developer tools",
      },
      {
         cve: "CVE-2020-6496",
         discovery_date: "2020-06-04T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1844557",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "chromium-browser: Use after free in payments",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
               "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-6496",
            },
            {
               category: "external",
               summary: "RHBZ#1844557",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1844557",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-6496",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-6496",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-6496",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-6496",
            },
            {
               category: "external",
               summary: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
         ],
         release_date: "2020-06-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2020-06-15T12:55:31+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
               product_ids: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2020:2544",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-0:83.0.4103.97-1.el6_10.x86_64",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.i686",
                  "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:83.0.4103.97-1.el6_10.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "chromium-browser: Use after free in payments",
      },
   ],
}

cve-2020-6475

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1020026	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.671Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1020026",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Incorrect security UI",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:42",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1020026",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6475",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Incorrect security UI",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1020026",
                     refsource: "MISC",
                     url: "https://crbug.com/1020026",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6475",
      datePublished: "2020-05-21T03:46:12",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.671Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6493

Vulnerability from cvelistv5

Published

2020-06-03 22:50

Modified

2024-08-04 09:02

Severity ?

Summary

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

References

▼	URL	Tags
	https://crbug.com/1082105	x_refsource_MISC
	https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.97

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.696Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1082105",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.97",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-02T11:06:31",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1082105",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6493",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.97",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use after free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://crbug.com/1082105",
                     refsource: "MISC",
                     url: "https://crbug.com/1082105",
                  },
                  {
                     name: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6493",
      datePublished: "2020-06-03T22:50:36",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.696Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6474

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1059533	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.727Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1059533",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:43",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1059533",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6474",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use after free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1059533",
                     refsource: "MISC",
                     url: "https://crbug.com/1059533",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6474",
      datePublished: "2020-05-21T03:46:11",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.727Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6471

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1059577	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.714Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1059577",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:35",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1059577",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6471",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1059577",
                     refsource: "MISC",
                     url: "https://crbug.com/1059577",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6471",
      datePublished: "2020-05-21T03:46:10",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.714Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6495

Vulnerability from cvelistv5

Published

2020-06-03 22:50

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html	x_refsource_MISC
	https://crbug.com/1072116	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.97

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.718Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1072116",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.97",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-02T11:06:14",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1072116",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6495",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.97",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                  },
                  {
                     name: "https://crbug.com/1072116",
                     refsource: "MISC",
                     url: "https://crbug.com/1072116",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6495",
      datePublished: "2020-06-03T22:50:37",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.718Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6485

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1047285	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.813Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1047285",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient data validation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:31",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1047285",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6485",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient data validation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1047285",
                     refsource: "MISC",
                     url: "https://crbug.com/1047285",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6485",
      datePublished: "2020-05-21T03:46:17",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.813Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6469

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1067382	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.694Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1067382",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:13",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1067382",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6469",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1067382",
                     refsource: "MISC",
                     url: "https://crbug.com/1067382",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6469",
      datePublished: "2020-05-21T03:46:09",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.694Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6476

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1035315	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.711Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1035315",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:07:08",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1035315",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6476",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1035315",
                     refsource: "MISC",
                     url: "https://crbug.com/1035315",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6476",
      datePublished: "2020-05-21T03:46:12",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.711Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6483

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/966507	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.715Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/966507",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:07:21",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/966507",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6483",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/966507",
                     refsource: "MISC",
                     url: "https://crbug.com/966507",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6483",
      datePublished: "2020-05-21T03:46:16",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.715Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6480

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1054966	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.812Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1054966",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:25",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1054966",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6480",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1054966",
                     refsource: "MISC",
                     url: "https://crbug.com/1054966",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6480",
      datePublished: "2020-05-21T03:46:14",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.812Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6473

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1049510	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.722Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1049510",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:32",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1049510",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6473",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1049510",
                     refsource: "MISC",
                     url: "https://crbug.com/1049510",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6473",
      datePublished: "2020-05-21T03:46:11",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.722Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6470

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1065761	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.696Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1065761",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient validation of untrusted input",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:07:03",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1065761",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6470",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient validation of untrusted input",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1065761",
                     refsource: "MISC",
                     url: "https://crbug.com/1065761",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6470",
      datePublished: "2020-05-21T03:46:09",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.696Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6465

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

References

▼	URL	Tags
	https://crbug.com/1073015	x_refsource_MISC
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.785Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1073015",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:16",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1073015",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6465",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use after free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://crbug.com/1073015",
                     refsource: "MISC",
                     url: "https://crbug.com/1073015",
                  },
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6465",
      datePublished: "2020-05-21T03:46:07",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.785Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6490

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1035887	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.735Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1035887",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient data validation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:07:18",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1035887",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6490",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient data validation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1035887",
                     refsource: "MISC",
                     url: "https://crbug.com/1035887",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6490",
      datePublished: "2020-05-21T03:46:19",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.735Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6487

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/539938	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.762Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/539938",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:59",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/539938",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6487",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/539938",
                     refsource: "MISC",
                     url: "https://crbug.com/539938",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6487",
      datePublished: "2020-05-21T03:46:18",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.762Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6488

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1044277	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.789Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1044277",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:23",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1044277",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6488",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1044277",
                     refsource: "MISC",
                     url: "https://crbug.com/1044277",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6488",
      datePublished: "2020-05-21T03:46:18",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.789Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6467

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1068084	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.811Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1068084",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:07:07",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1068084",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6467",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use after free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1068084",
                     refsource: "MISC",
                     url: "https://crbug.com/1068084",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6467",
      datePublished: "2020-05-21T03:46:08",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.811Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6486

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1055524	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.811Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1055524",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:31",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1055524",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6486",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1055524",
                     refsource: "MISC",
                     url: "https://crbug.com/1055524",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6486",
      datePublished: "2020-05-21T03:46:17",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.811Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6472

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1064519	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.717Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1064519",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:27",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1064519",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6472",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1064519",
                     refsource: "MISC",
                     url: "https://crbug.com/1064519",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6472",
      datePublished: "2020-05-21T03:46:10",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.717Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6468

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1076708	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.695Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1076708",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Type Confusion",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:18",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1076708",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6468",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Type Confusion",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1076708",
                     refsource: "MISC",
                     url: "https://crbug.com/1076708",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6468",
      datePublished: "2020-05-21T03:46:09",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.695Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6466

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1074706	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.661Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1074706",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:18",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1074706",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6466",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use after free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1074706",
                     refsource: "MISC",
                     url: "https://crbug.com/1074706",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6466",
      datePublished: "2020-05-21T03:46:08",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.661Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6478

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1037730	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.720Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1037730",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:13",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1037730",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6478",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Inappropriate implementation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1037730",
                     refsource: "MISC",
                     url: "https://crbug.com/1037730",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6478",
      datePublished: "2020-05-21T03:46:13",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.720Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6496

Vulnerability from cvelistv5

Published

2020-06-03 22:50

Modified

2024-08-04 09:02

Severity ?

Summary

Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html	x_refsource_MISC
	https://crbug.com/1085990	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.97

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.813Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1085990",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.97",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use after free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-02T11:06:32",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1085990",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6496",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.97",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use after free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                  },
                  {
                     name: "https://crbug.com/1085990",
                     refsource: "MISC",
                     url: "https://crbug.com/1085990",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6496",
      datePublished: "2020-06-03T22:50:37",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.813Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6479

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1041749	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.716Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1041749",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:20",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1041749",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6479",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Inappropriate implementation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1041749",
                     refsource: "MISC",
                     url: "https://crbug.com/1041749",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6479",
      datePublished: "2020-05-21T03:46:14",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.716Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6494

Vulnerability from cvelistv5

Published

2020-06-03 22:50

Modified

2024-08-04 09:02

Severity ?

Summary

Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html	x_refsource_MISC
	https://crbug.com/1083972	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.97

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.727Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1083972",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.97",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Incorrect security UI",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-02T11:06:09",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1083972",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6494",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.97",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Incorrect security UI",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html",
                  },
                  {
                     name: "https://crbug.com/1083972",
                     refsource: "MISC",
                     url: "https://crbug.com/1083972",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6494",
      datePublished: "2020-06-03T22:50:36",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.727Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6484

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1045787	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.801Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1045787",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient data validation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:17",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1045787",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6484",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient data validation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1045787",
                     refsource: "MISC",
                     url: "https://crbug.com/1045787",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6484",
      datePublished: "2020-05-21T03:46:16",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.801Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6491

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1050011	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.786Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1050011",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Incorrect security UI",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-08T02:06:28",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1050011",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6491",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Incorrect security UI",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1050011",
                     refsource: "MISC",
                     url: "https://crbug.com/1050011",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6491",
      datePublished: "2020-05-21T03:46:20",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.786Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6482

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/795595	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.723Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/795595",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:44",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/795595",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6482",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/795595",
                     refsource: "MISC",
                     url: "https://crbug.com/795595",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6482",
      datePublished: "2020-05-21T03:46:15",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.723Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6489

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1050756	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.728Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1050756",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Inappropriate implementation",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:06:23",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1050756",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6489",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted HTML page.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Inappropriate implementation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1050756",
                     refsource: "MISC",
                     url: "https://crbug.com/1050756",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6489",
      datePublished: "2020-05-21T03:46:19",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.728Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-6481

Vulnerability from cvelistv5

Published

2020-05-21 03:46

Modified

2024-08-04 09:02

Severity ?

Summary

Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.

References

▼	URL	Tags
	https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html	x_refsource_MISC
	https://crbug.com/1068531	x_refsource_MISC
	https://security.gentoo.org/glsa/202006-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4714	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: unspecified < 83.0.4103.61

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:02:40.723Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://crbug.com/1068531",
               },
               {
                  name: "GLSA-202006-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-02",
               },
               {
                  name: "openSUSE-SU-2020:0823",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
               },
               {
                  name: "openSUSE-SU-2020:0832",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
               },
               {
                  name: "FEDORA-2020-08561721ad",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
               },
               {
                  name: "DSA-4714",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4714",
               },
               {
                  name: "FEDORA-2020-77f89ab772",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
               },
               {
                  name: "GLSA-202101-30",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-30",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Chrome",
               vendor: "Google",
               versions: [
                  {
                     lessThan: "83.0.4103.61",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Insufficient policy enforcement",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-26T02:07:19",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://crbug.com/1068531",
            },
            {
               name: "GLSA-202006-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-02",
            },
            {
               name: "openSUSE-SU-2020:0823",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
            },
            {
               name: "openSUSE-SU-2020:0832",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
            },
            {
               name: "FEDORA-2020-08561721ad",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
            },
            {
               name: "DSA-4714",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4714",
            },
            {
               name: "FEDORA-2020-77f89ab772",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
            },
            {
               name: "GLSA-202101-30",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-30",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2020-6481",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Chrome",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "83.0.4103.61",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Google",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Insufficient policy enforcement",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                     refsource: "MISC",
                     url: "https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html",
                  },
                  {
                     name: "https://crbug.com/1068531",
                     refsource: "MISC",
                     url: "https://crbug.com/1068531",
                  },
                  {
                     name: "GLSA-202006-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-02",
                  },
                  {
                     name: "openSUSE-SU-2020:0823",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0832",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html",
                  },
                  {
                     name: "FEDORA-2020-08561721ad",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/",
                  },
                  {
                     name: "DSA-4714",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4714",
                  },
                  {
                     name: "FEDORA-2020-77f89ab772",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/",
                  },
                  {
                     name: "GLSA-202101-30",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-30",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2020-6481",
      datePublished: "2020-05-21T03:46:15",
      dateReserved: "2020-01-08T00:00:00",
      dateUpdated: "2024-08-04T09:02:40.723Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature