GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2019:1853-1

Vulnerability from csaf_opensuse - Published: 2019-08-13 09:49 - Updated: 2019-08-13 09:49
Summary
Security update for chromium
Severity
Important
Notes
Title of the patch: Security update for chromium
Description of the patch: This update for chromium to version 76.0.3809.87 fixes the following issues: - CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492) - CVE-2019-5860: Use-after-free in PDFium (boo#1143492) - CVE-2019-5853: Memory corruption in regexp length check (boo#1143492) - CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492) - CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492) - CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492) - CVE-2019-5855: Integer overflow in PDFium (boo#1143492) - CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492) - CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492) - CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492) - CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492) - CVE-2019-5861: Click location incorrectly checked (boo#1143492) - CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492) - CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492) - CVE-2019-5852: Object leak of utility functions (boo#1143492) This update was imported from the openSUSE:Leap:15.0:Update update project.
Patchnames: openSUSE-2019-1853
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2019-5850
9.6 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2019-5851
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5852
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5853
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5854
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5855
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5856
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5857
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5858
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5859
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5860
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact important
CVE-2019-5861
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5862
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5863
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5864
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
CVE-2019-5865
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 4 products, the same list as for CVE-2019-5850
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://lists.opensuse.org/archives/list/security… self
https://lists.opensuse.org/archives/list/security… self
https://bugzilla.suse.com/1143492 self
https://bugzilla.suse.com/1144625 self
https://www.suse.com/security/cve/CVE-2019-5850/ self
https://www.suse.com/security/cve/CVE-2019-5851/ self
https://www.suse.com/security/cve/CVE-2019-5852/ self
https://www.suse.com/security/cve/CVE-2019-5853/ self
https://www.suse.com/security/cve/CVE-2019-5854/ self
https://www.suse.com/security/cve/CVE-2019-5855/ self
https://www.suse.com/security/cve/CVE-2019-5856/ self
https://www.suse.com/security/cve/CVE-2019-5857/ self
https://www.suse.com/security/cve/CVE-2019-5858/ self
https://www.suse.com/security/cve/CVE-2019-5859/ self
https://www.suse.com/security/cve/CVE-2019-5860/ self
https://www.suse.com/security/cve/CVE-2019-5861/ self
https://www.suse.com/security/cve/CVE-2019-5862/ self
https://www.suse.com/security/cve/CVE-2019-5863/ self
https://www.suse.com/security/cve/CVE-2019-5864/ self
https://www.suse.com/security/cve/CVE-2019-5865/ self
https://www.suse.com/security/cve/CVE-2019-5850 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5851 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5852 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5853 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5854 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5855 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5856 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5857 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5858 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5859 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5860 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5861 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5862 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5863 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5864 external
https://bugzilla.suse.com/1143492 external
https://www.suse.com/security/cve/CVE-2019-5865 external
https://bugzilla.suse.com/1143492 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for chromium",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for chromium to version 76.0.3809.87 fixes the following issues:\n\n- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)\n- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)\n- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)\n- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)\n- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)\n- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)\n- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)\n- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)\n- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)\n- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)\n- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)\n- CVE-2019-5861: Click location incorrectly checked (boo#1143492)\n- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)\n- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)\n- CVE-2019-5852: Object leak of utility functions (boo#1143492)\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-1853",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1853-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:1853-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA/#JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:1853-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA/#JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1143492",
        "url": "https://bugzilla.suse.com/1143492"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144625",
        "url": "https://bugzilla.suse.com/1144625"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5850 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5851 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5852 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5853 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5854 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5854/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5855 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5856 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5856/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5857 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5858 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5858/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5859 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5859/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5860 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5860/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5861 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5861/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5862 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5862/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5863 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5863/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5864 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5864/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5865 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5865/"
      }
    ],
    "title": "Security update for chromium",
    "tracking": {
      "current_release_date": "2019-08-13T09:49:04Z",
      "generator": {
        "date": "2019-08-13T09:49:04Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:1853-1",
      "initial_release_date": "2019-08-13T09:49:04Z",
      "revision_history": [
        {
          "date": "2019-08-13T09:49:04Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-76.0.3809.87-bp150.220.1.aarch64",
                "product": {
                  "name": "chromedriver-76.0.3809.87-bp150.220.1.aarch64",
                  "product_id": "chromedriver-76.0.3809.87-bp150.220.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-76.0.3809.87-bp150.220.1.aarch64",
                "product": {
                  "name": "chromium-76.0.3809.87-bp150.220.1.aarch64",
                  "product_id": "chromium-76.0.3809.87-bp150.220.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromedriver-76.0.3809.87-bp150.220.1.x86_64",
                "product": {
                  "name": "chromedriver-76.0.3809.87-bp150.220.1.x86_64",
                  "product_id": "chromedriver-76.0.3809.87-bp150.220.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "chromium-76.0.3809.87-bp150.220.1.x86_64",
                "product": {
                  "name": "chromium-76.0.3809.87-bp150.220.1.x86_64",
                  "product_id": "chromium-76.0.3809.87-bp150.220.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15",
                "product": {
                  "name": "SUSE Package Hub 15",
                  "product_id": "SUSE Package Hub 15"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-76.0.3809.87-bp150.220.1.aarch64 as component of SUSE Package Hub 15",
          "product_id": "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64"
        },
        "product_reference": "chromedriver-76.0.3809.87-bp150.220.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromedriver-76.0.3809.87-bp150.220.1.x86_64 as component of SUSE Package Hub 15",
          "product_id": "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64"
        },
        "product_reference": "chromedriver-76.0.3809.87-bp150.220.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-76.0.3809.87-bp150.220.1.aarch64 as component of SUSE Package Hub 15",
          "product_id": "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64"
        },
        "product_reference": "chromium-76.0.3809.87-bp150.220.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-76.0.3809.87-bp150.220.1.x86_64 as component of SUSE Package Hub 15",
          "product_id": "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        },
        "product_reference": "chromium-76.0.3809.87-bp150.220.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-5850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5850",
          "url": "https://www.suse.com/security/cve/CVE-2019-5850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5850",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2019-5850"
    },
    {
      "cve": "CVE-2019-5851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5851",
          "url": "https://www.suse.com/security/cve/CVE-2019-5851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5851",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5851"
    },
    {
      "cve": "CVE-2019-5852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5852",
          "url": "https://www.suse.com/security/cve/CVE-2019-5852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5852",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5852"
    },
    {
      "cve": "CVE-2019-5853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5853",
          "url": "https://www.suse.com/security/cve/CVE-2019-5853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5853",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5853"
    },
    {
      "cve": "CVE-2019-5854",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5854"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5854",
          "url": "https://www.suse.com/security/cve/CVE-2019-5854"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5854",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5854"
    },
    {
      "cve": "CVE-2019-5855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5855",
          "url": "https://www.suse.com/security/cve/CVE-2019-5855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5855",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5855"
    },
    {
      "cve": "CVE-2019-5856",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5856"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5856",
          "url": "https://www.suse.com/security/cve/CVE-2019-5856"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5856",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5856"
    },
    {
      "cve": "CVE-2019-5857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5857",
          "url": "https://www.suse.com/security/cve/CVE-2019-5857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5857",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5857"
    },
    {
      "cve": "CVE-2019-5858",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5858"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5858",
          "url": "https://www.suse.com/security/cve/CVE-2019-5858"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5858",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5858"
    },
    {
      "cve": "CVE-2019-5859",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5859"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5859",
          "url": "https://www.suse.com/security/cve/CVE-2019-5859"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5859",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5859"
    },
    {
      "cve": "CVE-2019-5860",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5860"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5860",
          "url": "https://www.suse.com/security/cve/CVE-2019-5860"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5860",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5860"
    },
    {
      "cve": "CVE-2019-5861",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5861"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5861",
          "url": "https://www.suse.com/security/cve/CVE-2019-5861"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5861",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5861"
    },
    {
      "cve": "CVE-2019-5862",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5862"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5862",
          "url": "https://www.suse.com/security/cve/CVE-2019-5862"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5862",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5862"
    },
    {
      "cve": "CVE-2019-5863",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5863"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5863",
          "url": "https://www.suse.com/security/cve/CVE-2019-5863"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5863",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5863"
    },
    {
      "cve": "CVE-2019-5864",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5864"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5864",
          "url": "https://www.suse.com/security/cve/CVE-2019-5864"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5864",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5864"
    },
    {
      "cve": "CVE-2019-5865",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5865"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
          "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5865",
          "url": "https://www.suse.com/security/cve/CVE-2019-5865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1143492 for CVE-2019-5865",
          "url": "https://bugzilla.suse.com/1143492"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromedriver-76.0.3809.87-bp150.220.1.x86_64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.aarch64",
            "SUSE Package Hub 15:chromium-76.0.3809.87-bp150.220.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-13T09:49:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5865"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.