Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6437 State: PUBLISHED Published: 2020-04-13T17:30:55 Last Updated: 2024-08-04T09:02:40.479Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/639173 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists
ounce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6438 State: PUBLISHED Published: 2020-04-13T17:30:55 Last Updated: 2024-08-04T09:02:40.364Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/714617 - http://lists.opensuse.org/opensuse-security-announce/2020-04/m
el-update-for-desktop_7.html - https://crbug.com/714617 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6439 State: PUBLISHED Published: 2020-04-13T17:30:56 Last Updated: 2024-08-04T09:02:40.420Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/868145 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - http
urity-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6440 State: PUBLISHED Published: 2020-04-13T17:30:56 Last Updated: 2024-08-04T09:02:40.463Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/894477 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://list
ml - https://crbug.com/894477 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6441 State: PUBLISHED Published: 2020-04-13T17:30:57 Last Updated: 2024-08-04T09:02:40.680Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/959571 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://
y-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6442 State: PUBLISHED Published: 2020-04-13T17:30:57 Last Updated: 2024-08-04T09:02:40.455Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/1013906 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lis
nnounce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6443 State: PUBLISHED Published: 2020-04-13T17:30:58 Last Updated: 2024-08-04T09:02:40.476Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/1040080 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-
40080 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6444 State: PUBLISHED Published: 2020-04-13T17:30:58 Last Updated: 2024-08-04T09:02:40.440Z Vendors: Google Products: Chrome Problem Types: Uninitialized Use Description: Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/922882 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedora
020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6445 State: PUBLISHED Published: 2020-04-13T17:30:59 Last Updated: 2024-08-04T09:02:40.621Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/933171 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg000
g/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6446 State: PUBLISHED Published: 2020-04-13T17:30:59 Last Updated: 2024-08-04T09:02:40.545Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/933172 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg000
CVE ID: CVE-2020-6447 State: PUBLISHED Published: 2020-04-13T17:31:00 Last Updated: 2024-08-04T09:02:40.684Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/991217 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.o
/crbug.com/991217 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6448 State: PUBLISHED Published: 2020-04-13T17:31:00 Last Updated: 2024-08-04T09:02:40.520Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/1037872 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.o
CVE ID: CVE-2020-6449 State: PUBLISHED Published: 2020-03-20T00:00:00 Last Updated: 2024-08-04T09:02:40.688Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html - https://crbug.com/1059686 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html - https://www.debian.org/security/2020/dsa-4645 - https://lists.fedoraproject.org/archives/list/package
03/msg00028.html - https://www.debian.org/security/2020/dsa-4645 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWANFIR3PYAL5RJQ4AO3ZS2DYMSF2ZGZ/ - https://security.gentoo.org/glsa/202003-53 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DDNOAGIX5D77TTHT6YPMVJ5WTXTCQEI/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/ - http://packetstormsecurity.com/files/172843/Chrome-WebAudio-Use-After-Free.html
CVE ID: CVE-2020-6450 State: PUBLISHED Published: 2020-04-13T17:31:01 Last Updated: 2024-08-04T09:02:40.683Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1062247 - https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J
20-04/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQTV7EFWQKF6VJBCVH4PUQJLGO7ISLTN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMXT4OKBMCJSNSX7TZDBJNY6ORKFZRFO/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html
CVE ID: CVE-2020-6451 State: PUBLISHED Published: 2020-04-13T17:31:01 Last Updated: 2024-08-04T09:02:40.667Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_31.html - https://crbug.com/1061018 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J
CVE ID: CVE-2020-6452 State: PUBLISHED Published: 2020-04-13T17:31:02 Last Updated: 2024-08-04T09:02:40.718Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_31.html - https://crbug.com/1059764 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
nounce/2020-04/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQTV7EFWQKF6VJBCVH4PUQJLGO7ISLTN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMXT4OKBMCJSNSX7TZDBJNY6ORKFZRFO/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html
CVE ID: CVE-2020-6453 State: PUBLISHED Published: 2020-06-03T22:50:35 Last Updated: 2024-08-04T09:02:40.803Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_31.html - https://crbug.com/1065094
CVE ID: CVE-2020-6454 State: PUBLISHED Published: 2020-04-13T17:31:02 Last Updated: 2024-08-04T09:02:40.676Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/1019161 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6455 State: PUBLISHED Published: 2020-04-13T17:31:03 Last Updated: 2024-08-04T09:02:40.703Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/1059669 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fed
e/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6456 State: PUBLISHED Published: 2020-04-13T17:31:03 Last Updated: 2024-08-04T09:02:40.786Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted clipboard contents. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html - https://crbug.com/1040755 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announc
ists.opensuse.org/opensuse-security-announce/2020-04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XWIVVYIQU67QR2LHNGGZBS4FZOW2RQO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFVP775RPRDVY5FUCN7ABH5AE74TQFDD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMXPDHEEACPD3BCMTC26SCCYB2ZMUOAO/ - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6457 State: PUBLISHED Published: 2020-05-21T03:46:03 Last Updated: 2024-08-04T09:02:40.590Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1067851 - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html - https://www.debian.org/security/2020/dsa-4714
CVE ID: CVE-2020-6458 State: PUBLISHED Published: 2020-05-21T03:46:04 Last Updated: 2024-08-04T09:02:40.674Z Vendors: Google Products: Chrome Problem Types: Out of bounds read and write Description: Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1067270 - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_21.html - https://www.debian.org/security/2020/dsa-4714 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1044