Debian Chromium vulnerabilities

CVE-2020-6447 [HIGH] CVE-2020-6447: chromium - Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4... Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 81.0.4044.92-1) bullseye: resolved (fixed in 81.0.4044.92-1) forky: resolved (fixed in 81.0.4044.92-1) sid:

CVE-2020-6452 [HIGH] CVE-2020-6452: chromium - Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a ... Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 80.0.3987.162-1) bullseye: resolved (fixed in 80.0.3987.162-1) forky: resolved (fixed in 80.0.3987.162-1) sid: resolved (fixed in 80.0.3987.162-1) trixie: resolved (fi

CVE-2020-6525 [HIGH] CVE-2020-6525: chromium - Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a re... Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie: resolved (

CVE-2020-15960 [HIGH] CVE-2020-15960: chromium - Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed ... Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1)

CVE-2020-6398 [HIGH] CVE-2020-6398: chromium - Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allow... Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Scope: local bookworm: resolved (fixed in 80.0.3987.106-1) bullseye: resolved (fixed in 80.0.3987.106-1) forky: resolved (fixed in 80.0.3987.106-1) sid: resolved (fixed in 80.0.3987.106-1) trixie: resolved

CVE-2020-6448 [HIGH] CVE-2020-6448: chromium - Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote att... Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 81.0.4044.92-1) bullseye: resolved (fixed in 81.0.4044.92-1) forky: resolved (fixed in 81.0.4044.92-1) sid: resolved (fixed in 81.0.4044.92-1) trixie: resolved (fixed in 81.0.40

CVE-2020-6423 [HIGH] CVE-2020-6423: chromium - Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote ... Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 81.0.4044.92-1) bullseye: resolved (fixed in 81.0.4044.92-1) forky: resolved (fixed in 81.0.4044.92-1) sid: resolved (fixed in 81.0.4044.92-1) trixie: resolved (fixed in 81.0

CVE-2020-6474 [HIGH] CVE-2020-6474: chromium - Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote ... Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 83.0.4103.83-1) bullseye: resolved (fixed in 83.0.4103.83-1) forky: resolved (fixed in 83.0.4103.83-1) sid: resolved (fixed in 83.0.4103.83-1) trixie: resolved (fixed in 83.0

CVE-2020-6434 [HIGH] CVE-2020-6434: chromium - Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remo... Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 81.0.4044.92-1) bullseye: resolved (fixed in 81.0.4044.92-1) forky: resolved (fixed in 81.0.4044.92-1) sid: resolved (fixed in 81.0.4044.92-1) trixie: resolved (fixed in 8

CVE-2020-6386 [HIGH] CVE-2020-6386: chromium - Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remot... Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 80.0.3987.116-1) bullseye: resolved (fixed in 80.0.3987.116-1) forky: resolved (fixed in 80.0.3987.116-1) sid: resolved (fixed in 80.0.3987.116-1) trixie: resolved (fixed i

CVE-2020-6410 [HIGH] CVE-2020-6410: chromium - Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.398... Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name. Scope: local bookworm: resolved (fixed in 80.0.3987.106-1) bullseye: resolved (fixed in 80.0.3987.106-1) forky: resolved (fixed in 80.0.3987.106-1) sid: resolved (fixed in 80.0.3987.106-1) trixie: resolved (fixe

CVE-2020-6384 [HIGH] CVE-2020-6384: chromium - Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a rem... Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 80.0.3987.116-1) bullseye: resolved (fixed in 80.0.3987.116-1) forky: resolved (fixed in 80.0.3987.116-1) sid: resolved (fixed in 80.0.3987.116-1) trixie: resolved (fixed

CVE-2020-6467 [HIGH] CVE-2020-6467: chromium - Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote... Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 83.0.4103.83-1) bullseye: resolved (fixed in 83.0.4103.83-1) forky: resolved (fixed in 83.0.4103.83-1) sid: resolved (fixed in 83.0.4103.83-1) trixie: resolved (fixed in 83.

CVE-2020-16002 [HIGH] CVE-2020-16002: chromium - Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remot... Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie: resolved (fi

CVE-2020-6436 [HIGH] CVE-2020-6436: chromium - Use after free in window management in Google Chrome prior to 81.0.4044.92 allow... Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 81.0.4044.92-1) bullseye: resolved (fixed in 81.0.4044.92-1) forky: resolved (fixed in 81.0.4044.92-1) sid: resolved (fixed in 81.0.4044.92-1) trixie: resolved (f

CVE-2020-15979 [HIGH] CVE-2020-15979: chromium - Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowe... Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie: re

CVE-2020-16000 [HIGH] CVE-2020-16000: chromium - Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 al... Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie

CVE-2020-16001 [HIGH] CVE-2020-16001: chromium - Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote... Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.88-0.1) bullseye: resolved (fixed in 87.0.4280.88-0.1) forky: resolved (fixed in 87.0.4280.88-0.1) sid: resolved (fixed in 87.0.4280.88-0.1) trixie: resolved (fi

CVE-2019-13728 [HIGH] CVE-2019-13728: chromium - Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed... Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 79.0.3945.79-1) bullseye: resolved (fixed in 79.0.3945.79-1) forky: resolved (fixed in 79.0.3945.79-1) sid: resolved (fixed in 79.0.3945.79-1) trixie: resolved (f

CVE-2021-21161 [HIGH] CVE-2021-21161: chromium - Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed ... Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Scope: local bookworm: resolved (fixed in 89.0.4389.82-1) bullseye: resolved (fixed in 89.0.4389.82-1) forky: resolved (fixed in 89.0.4389.82-1) sid: resolved (fixed in 89.0.4389.82-1) trixie: resolved (fi