VulnerableCode Package Details - pkg:rpm/redhat/chromium-browser@86.0.4240.183-1?arch=el6

Search for packages

Vulnerability	Summary	Fixed by
VCID-cfg9-fy1r-uqg6 Aliases: CVE-2020-16009 GHSA-m7mf-48hp-5qmr	CVE-2020-16009: Inappropriate implementation in V8 - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16009 Google is aware of reports that exploits for CVE-2020-16009 exist in the wild. Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. There is currently little to no public information on the issue other than it has been flagged as `High` severity.	There are no reported fixed by versions.
VCID-hvgx-m4wg-s3f4 Aliases: CVE-2020-16004	Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.
VCID-mpxg-4rpz-dyay Aliases: CVE-2020-16006	Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.
VCID-txw1-6aqq-qyhc Aliases: CVE-2020-16005	Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.
VCID-yhmq-3t19-fufm Aliases: CVE-2020-16008	Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.

Vulnerability

Summary

Fixed by

VCID-cfg9-fy1r-uqg6
Aliases:
CVE-2020-16009
GHSA-m7mf-48hp-5qmr

CVE-2020-16009: Inappropriate implementation in V8 - https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16009 Google is aware of reports that exploits for CVE-2020-16009 exist in the wild. Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. There is currently little to no public information on the issue other than it has been flagged as `High` severity.