Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2427-1 Rating: important References: 1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

openSUSE Security Update : chromium / re2 (openSUSE-2019-2420)

This update for chromium, re2 fixes the following issues : Chromium was updated to 78.0.3904.70 boo1154806 : - CVE-2019-13699: Use-after-free in media - CVE-2019-13700: Buffer overrun in Blink - CVE-2019-13701: URL spoof in navigation - CVE-2019-13702: Privilege elevation in Installer -...

OPENSUSE-SU-2019:2426-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo1155643: CVE-2019-13721: Use-after-free in PDFium CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.0:Update update project...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:2421-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!

Attention readers, if you are using Chrome on your Windows, Mac, and Linux computers, you need to update your web browsing software immediately to the latest version Google released earlier today. With the release of Chrome 78.0.3904.87, Google is warning billions of users to install an urgent...

New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!

Attention readers, if you are using Chrome on your Windows, Mac, and Linux computers, you need to update your web browsing software immediately to the latest version Google released earlier today. With the release of Chrome 78.0.3904.87, Google is warning billions of users to install an urgent...

KLA11601 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use-after-free in PDFium can be exploited remotely via specially designed website to cause...

Stable Channel Update for Desktop

The stable channel has been updated to 78.0.3904.87 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

chromium-browser: User gesture needed for printing

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

Google Chrome PDFium Buffer Overflow Vulnerability (CNVD-2019-38249)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. A buffer error vulnerability exists in the PDFium component of Google Chrome versions prior to 78.0.3904.70. A remote attacker can exploit this vulnerability by reading...

CVE-2019-13706

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

PT-2019-5122

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.70 Description The issue is related to an out of bounds memory access in PDFium, a component of Google Chrome, which can be exploited by a remote attacker using a crafted PDF file. This can potentially...

CVE-2019-13679

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the PDFium PDF-content processor in Google Chrome browser is related to an error that causes previously freed memory to be reclaimed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created PDF file...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers is related to a corruption that occurs during integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

CVE-2019-5795

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

PT-2019-4425

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.87 Description The issue is related to a use after free vulnerability in the PDFium PDF content handler. This allows a remote attacker to potentially exploit heap corruption via a specially crafted HTM...

CVE-2017-5034

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2017-5057

Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

KLA11741 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Policy enforcement...