RHSA-2019:1021

Vulnerability from csaf_redhat - Published: 2019-05-07 17:06 - Updated: 2026-11-12 16:53
Summary
Red Hat Security Advisory: chromium-browser security update
Severity
Important
Notes
Topic: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 74.0.3729.108. Security Fix(es): * chromium-browser: Use after free in PDFium (CVE-2019-5805) * chromium-browser: Integer overflow in Angle (CVE-2019-5806) * chromium-browser: Memory corruption in V8 (CVE-2019-5807) * chromium-browser: Use after free in Blink (CVE-2019-5808) * chromium-browser: Use after free in Blink (CVE-2019-5809) * chromium-browser: User information disclosure in Autofill (CVE-2019-5810) * chromium-browser: CORS bypass in Blink (CVE-2019-5811) * chromium-browser: Out of bounds read in V8 (CVE-2019-5813) * chromium-browser: CORS bypass in Blink (CVE-2019-5814) * chromium-browser: Heap buffer overflow in Blink (CVE-2019-5815) * chromium-browser: Uninitialized value in media reader (CVE-2019-5818) * chromium-browser: Incorrect escaping in developer tools (CVE-2019-5819) * chromium-browser: Integer overflow in PDFium (CVE-2019-5820) * chromium-browser: Integer overflow in PDFium (CVE-2019-5821) * chromium-browser: CORS bypass in download manager (CVE-2019-5822) * chromium-browser: Forced navigation from service worker (CVE-2019-5823) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2019-5805

A flaw was found in the PDFium component of Chromium. A remote attacker could exploit a use-after-free condition—where the application attempts to access memory after it has been released—by convincing a user to open a specially crafted PDF document. Successful exploitation could allow the attacker to execute arbitrary code or cause the application to crash, leading to a denial of service.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Product Identifier Version Remediation
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 —
Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 —
Vendor Fix fix
Threats
Impact Important
CVE-2019-5806

A flaw was found in the ANGLE (Almost Native Graphics Layer Engine) graphics component of Chromium. An integer overflow in the component can lead to heap memory corruption when processing graphical content. A remote attacker could exploit this flaw by convincing a user to visit a specially crafted webpage, potentially leading to arbitrary code execution or a Denial of Service (DoS).

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Important
CVE-2019-5807

A flaw was found in the V8 component of chromium-browser. An improper object lifetime management issue allows a remote attacker to trigger heap memory corruption by convincing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code or cause a denial of service (DoS) crash within the browser process.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Important
CVE-2019-5808

A flaw was found in the Blink component of Chromium. By convincing a user to open a specially crafted web page, a remote attacker could trigger a use-after-free condition, which occurs when the application attempts to access memory after it has been released. Successful exploitation could lead to memory corruption, potentially enabling arbitrary code execution or causing a denial of service (DoS).

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Important
CVE-2019-5809

A flaw was found in the Chromium browser's file chooser component. A remote attacker who has compromised the browser's renderer process can exploit a use-after-free vulnerability by convincing a user to visit a specially crafted web page. Successful exploitation allows the attacker to perform privilege escalation and escape the browser sandbox.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Important
CVE-2019-5810

A flaw was found in the Autofill component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to visit a crafted HTML page. Successful exploitation could allow the attacker to access sensitive information stored in process memory.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-125 - Out-of-bounds Read
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5811

A flaw was found in the Blink component of Chromium. This vulnerability allows a remote attacker to cause unauthorized information disclosure by bypassing browser same-origin security restrictions. By convincing a user to visit a specially crafted web page, an attacker can exploit improper handling of Cross-Origin Resource Sharing (CORS) requests within Service Workers to access sensitive data from other web domains.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5813

A flaw was found in the V8 component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted web page. This issue arises from a use-after-free condition, where the software accesses memory after it has been released. Successful exploitation could result in heap memory corruption, potentially leading to arbitrary code execution or a Denial of Service (DoS) crash.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-125 - Out-of-bounds Read
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5814

A flaw was found in the Blink component of Chromium. Due to insufficient security policy enforcement, a remote attacker can bypass Cross-Origin Resource Sharing (CORS) protections by convincing a victim to visit a crafted web page. This vulnerability leads to information disclosure, allowing the attacker to access sensitive data across different web origins.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5815

A flaw was found in the Blink component of the Chromium browser. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted web page, triggering heap memory corruption. This could allow the attacker to execute arbitrary code or cause an application crash resulting in a Denial of Service (DoS).

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-787 - Out-of-bounds Write
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5818

A flaw was found in the media reader component of Chromium. This vulnerability allows a remote attacker to obtain sensitive information from process memory. By tricking a user into opening a specially crafted video file, an attacker can trigger an uninitialized memory read to disclose sensitive browser data.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-908 - Use of Uninitialized Resource
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5819

A flaw was found in the developer tools component of the Chromium browser. Due to improper input validation and escaping, an attacker could potentially execute arbitrary code on the victim's system. To exploit this vulnerability, an attacker must trick a user into copying a specially crafted string to the clipboard while using the developer tools.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-78 - Improper Neutralization of Special Elements used in an OS Command
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5820

A flaw was found in the PDFium component of the Chromium browser. An integer overflow allows a remote attacker to cause heap memory corruption by convincing a user to open a specially crafted PDF document. Successful exploitation can lead to application instability, a denial of service (DoS), or unauthorized disclosure of sensitive memory data.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5821

A flaw was found in the PDFium component of the Chromium browser. An integer overflow occurs when processing specially crafted PDF documents. By convincing a user to open a malicious PDF file, a remote attacker could trigger heap memory corruption, potentially leading to information disclosure or a Denial of Service (DoS).

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-787 - Out-of-bounds Write
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2019-5822

A flaw was found in the download manager component of the Chromium browser. This vulnerability allows a remote attacker to cause information disclosure by bypassing Cross-Origin Resource Sharing (CORS) security restrictions. By tricking a user into visiting a crafted web page, an attacker could access sensitive data across different web origins without authorization.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-346 - Origin Validation Error
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Low
CVE-2019-5823

A flaw was found in chromium-browser. Insufficient policy enforcement in service workers allows a remote attacker to bypass navigation restrictions by convincing a user to visit a crafted HTML page. This issue enables an attacker to perform forced navigation to unintended web destinations.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CWE-601 - URL Redirection to Untrusted Site
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Low
CVE-2019-5825

A flaw was found in the V8 component of chromium-browser. An out-of-bounds write vulnerability occurs when the engine writes data past the boundary of allocated memory. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted web page, potentially leading to arbitrary code execution, memory corruption, or a Denial of Service (DoS) through an application crash.

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact Important
CVE-2019-5826

A flaw was found in the IndexedDB component of the Chromium browser. A remote attacker who has compromised a renderer process could exploit a use-after-free condition by convincing a user to visit a crafted web page. Successful exploitation could lead to memory corruption, potentially allowing arbitrary code execution or causing a Denial of Service (DoS).

8.8 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Important
CVE-2020-6503

A flaw was found in the accessibility component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation could lead to information disclosure by exposing sensitive data from the browser's process memory.

6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-358 - Improperly Implemented Security Check for Standard
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Moderate
CVE-2020-6504

A flaw was found in the notifications component of the Chromium browser. Due to insufficient policy enforcement, a remote attacker could convince a user to visit a specially crafted web page to bypass notification restrictions. Successful exploitation allows the attacker to display unauthorized notifications to the user.

4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-358 - Improperly Implemented Security Check for Standard
Affected products
Fixed 14 products, the same list as for CVE-2019-5805
Threats
Impact Low
References
URL Category
https://access.redhat.com/errata/RHSA-2019:1021 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1702895 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702896 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702897 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702898 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702899 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702900 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702901 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702903 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702904 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702905 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702908 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702909 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702910 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702911 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702912 external
https://bugzilla.redhat.com/show_bug.cgi?id=1702913 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-5805 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702895 external
https://www.cve.org/CVERecord?id=CVE-2019-5805 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5805 external
https://chromereleases.googleblog.com/2019/04/sta… external
https://access.redhat.com/security/cve/CVE-2019-5806 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702896 external
https://www.cve.org/CVERecord?id=CVE-2019-5806 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5806 external
https://access.redhat.com/security/cve/CVE-2019-5807 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702897 external
https://www.cve.org/CVERecord?id=CVE-2019-5807 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5807 external
https://access.redhat.com/security/cve/CVE-2019-5808 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702898 external
https://www.cve.org/CVERecord?id=CVE-2019-5808 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5808 external
https://access.redhat.com/security/cve/CVE-2019-5809 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702899 external
https://www.cve.org/CVERecord?id=CVE-2019-5809 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5809 external
https://access.redhat.com/security/cve/CVE-2019-5810 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702900 external
https://www.cve.org/CVERecord?id=CVE-2019-5810 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5810 external
https://access.redhat.com/security/cve/CVE-2019-5811 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702901 external
https://www.cve.org/CVERecord?id=CVE-2019-5811 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5811 external
https://access.redhat.com/security/cve/CVE-2019-5813 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702903 external
https://www.cve.org/CVERecord?id=CVE-2019-5813 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5813 external
https://access.redhat.com/security/cve/CVE-2019-5814 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702904 external
https://www.cve.org/CVERecord?id=CVE-2019-5814 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5814 external
https://access.redhat.com/security/cve/CVE-2019-5815 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702905 external
https://www.cve.org/CVERecord?id=CVE-2019-5815 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5815 external
https://access.redhat.com/security/cve/CVE-2019-5818 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702908 external
https://www.cve.org/CVERecord?id=CVE-2019-5818 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5818 external
https://access.redhat.com/security/cve/CVE-2019-5819 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702909 external
https://www.cve.org/CVERecord?id=CVE-2019-5819 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5819 external
https://access.redhat.com/security/cve/CVE-2019-5820 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702910 external
https://www.cve.org/CVERecord?id=CVE-2019-5820 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5820 external
https://access.redhat.com/security/cve/CVE-2019-5821 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702911 external
https://www.cve.org/CVERecord?id=CVE-2019-5821 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5821 external
https://access.redhat.com/security/cve/CVE-2019-5822 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702912 external
https://www.cve.org/CVERecord?id=CVE-2019-5822 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5822 external
https://access.redhat.com/security/cve/CVE-2019-5823 self
https://bugzilla.redhat.com/show_bug.cgi?id=1702913 external
https://www.cve.org/CVERecord?id=CVE-2019-5823 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5823 external
https://access.redhat.com/security/cve/CVE-2019-5825 self
https://bugzilla.redhat.com/show_bug.cgi?id=1707247 external
https://www.cve.org/CVERecord?id=CVE-2019-5825 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5825 external
https://chromereleases.googleblog.com/2019/04/sta… external
https://www.cisa.gov/known-exploited-vulnerabilit… external
https://access.redhat.com/security/cve/CVE-2019-5826 self
https://bugzilla.redhat.com/show_bug.cgi?id=1707248 external
https://www.cve.org/CVERecord?id=CVE-2019-5826 external
https://nvd.nist.gov/vuln/detail/CVE-2019-5826 external
https://access.redhat.com/security/cve/CVE-2020-6503 self
https://bugzilla.redhat.com/show_bug.cgi?id=1844476 external
https://www.cve.org/CVERecord?id=CVE-2020-6503 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6503 external
https://access.redhat.com/security/cve/CVE-2020-6504 self
https://bugzilla.redhat.com/show_bug.cgi?id=1844472 external
https://www.cve.org/CVERecord?id=CVE-2020-6504 external
https://nvd.nist.gov/vuln/detail/CVE-2020-6504 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 74.0.3729.108.\n\nSecurity Fix(es):\n\n* chromium-browser: Use after free in PDFium (CVE-2019-5805)\n\n* chromium-browser: Integer overflow in Angle (CVE-2019-5806)\n\n* chromium-browser: Memory corruption in V8 (CVE-2019-5807)\n\n* chromium-browser: Use after free in Blink (CVE-2019-5808)\n\n* chromium-browser: Use after free in Blink (CVE-2019-5809)\n\n* chromium-browser: User information disclosure in Autofill (CVE-2019-5810)\n\n* chromium-browser: CORS bypass in Blink (CVE-2019-5811)\n\n* chromium-browser: Out of bounds read in V8 (CVE-2019-5813)\n\n* chromium-browser: CORS bypass in Blink (CVE-2019-5814)\n\n* chromium-browser: Heap buffer overflow in Blink (CVE-2019-5815)\n\n* chromium-browser: Uninitialized value in media reader (CVE-2019-5818)\n\n* chromium-browser: Incorrect escaping in developer tools (CVE-2019-5819)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5820)\n\n* chromium-browser: Integer overflow in PDFium (CVE-2019-5821)\n\n* chromium-browser: CORS bypass in download manager (CVE-2019-5822)\n\n* chromium-browser: Forced navigation from service worker (CVE-2019-5823)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:1021",
        "url": "https://access.redhat.com/errata/RHSA-2019:1021"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1702895",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702895"
      },
      {
        "category": "external",
        "summary": "1702896",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702896"
      },
      {
        "category": "external",
        "summary": "1702897",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702897"
      },
      {
        "category": "external",
        "summary": "1702898",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702898"
      },
      {
        "category": "external",
        "summary": "1702899",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702899"
      },
      {
        "category": "external",
        "summary": "1702900",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702900"
      },
      {
        "category": "external",
        "summary": "1702901",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702901"
      },
      {
        "category": "external",
        "summary": "1702903",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702903"
      },
      {
        "category": "external",
        "summary": "1702904",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702904"
      },
      {
        "category": "external",
        "summary": "1702905",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702905"
      },
      {
        "category": "external",
        "summary": "1702908",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702908"
      },
      {
        "category": "external",
        "summary": "1702909",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702909"
      },
      {
        "category": "external",
        "summary": "1702910",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702910"
      },
      {
        "category": "external",
        "summary": "1702911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702911"
      },
      {
        "category": "external",
        "summary": "1702912",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702912"
      },
      {
        "category": "external",
        "summary": "1702913",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702913"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1021.json"
      }
    ],
    "title": "Red Hat Security Advisory: chromium-browser security update",
    "tracking": {
      "current_release_date": "2026-11-12T16:53:10+00:00",
      "generator": {
        "date": "2026-11-12T16:53:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2019:1021",
      "initial_release_date": "2019-05-07T17:06:08+00:00",
      "revision_history": [
        {
          "date": "2019-05-07T17:06:08+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-05-07T17:06:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-12T16:53:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
                  "product_id": "6Client-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
                  "product_id": "6ComputeNode-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
                  "product_id": "6Server-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
                  "product_id": "6Workstation-Supplementary-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
                  "product_id": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@74.0.3729.108-1.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
                "product": {
                  "name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
                  "product_id": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@74.0.3729.108-1.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
                  "product_id": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser-debuginfo@74.0.3729.108-1.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
                "product": {
                  "name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
                  "product_id": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/chromium-browser@74.0.3729.108-1.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
          "product_id": "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
          "product_id": "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
          "product_id": "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
          "product_id": "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        },
        "product_reference": "chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-5805",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702895"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the PDFium component of Chromium. A remote attacker could exploit a use-after-free condition\u2014where the application attempts to access memory after it has been released\u2014by convincing a user to open a specially crafted PDF document. Successful exploitation could allow the attacker to execute arbitrary code or cause the application to crash, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5805"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702895",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702895"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5805",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5805"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5805",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5805"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in PDFium"
    },
    {
      "cve": "CVE-2019-5806",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702896"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the ANGLE (Almost Native Graphics Layer Engine) graphics component of Chromium. An integer overflow in the component can lead to heap memory corruption when processing graphical content. A remote attacker could exploit this flaw by convincing a user to visit a specially crafted webpage, potentially leading to arbitrary code execution or a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in Angle",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5806"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702896",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702896"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5806",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5806"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5806",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5806"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Integer overflow in Angle"
    },
    {
      "cve": "CVE-2019-5807",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702897"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the V8 component of chromium-browser. An improper object lifetime management issue allows a remote attacker to trigger heap memory corruption by convincing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code or cause a denial of service (DoS) crash within the browser process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Memory corruption in V8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5807"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702897",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702897"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5807",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5807"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5807",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5807"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Memory corruption in V8"
    },
    {
      "cve": "CVE-2019-5808",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702898"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Blink component of Chromium. By convincing a user to open a specially crafted web page, a remote attacker could trigger a use-after-free condition, which occurs when the application attempts to access memory after it has been released. Successful exploitation could lead to memory corruption, potentially enabling arbitrary code execution or causing a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5808"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702898",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702898"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5808",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5808"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5808",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5808"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in Blink"
    },
    {
      "cve": "CVE-2019-5809",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702899"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Chromium browser\u0027s file chooser component. A remote attacker who has compromised the browser\u0027s renderer process can exploit a use-after-free vulnerability by convincing a user to visit a specially crafted web page. Successful exploitation allows the attacker to perform privilege escalation and escape the browser sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5809"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702899",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702899"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5809",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5809"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5809",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5809"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in Blink"
    },
    {
      "cve": "CVE-2019-5810",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702900"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Autofill component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to visit a crafted HTML page. Successful exploitation could allow the attacker to access sensitive information stored in process memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: User information disclosure in Autofill",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5810"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702900",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702900"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5810"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: User information disclosure in Autofill"
    },
    {
      "cve": "CVE-2019-5811",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702901"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Blink component of Chromium. This vulnerability allows a remote attacker to cause unauthorized information disclosure by bypassing browser same-origin security restrictions. By convincing a user to visit a specially crafted web page, an attacker can exploit improper handling of Cross-Origin Resource Sharing (CORS) requests within Service Workers to access sensitive data from other web domains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: CORS bypass in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5811"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702901"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5811"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: CORS bypass in Blink"
    },
    {
      "cve": "CVE-2019-5813",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702903"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the V8 component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted web page. This issue arises from a use-after-free condition, where the software accesses memory after it has been released. Successful exploitation could result in heap memory corruption, potentially leading to arbitrary code execution or a Denial of Service (DoS) crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds read in V8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5813"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702903",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702903"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5813"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Out of bounds read in V8"
    },
    {
      "cve": "CVE-2019-5814",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702904"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Blink component of Chromium. Due to insufficient security policy enforcement, a remote attacker can bypass Cross-Origin Resource Sharing (CORS) protections by convincing a victim to visit a crafted web page. This vulnerability leads to information disclosure, allowing the attacker to access sensitive data across different web origins.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: CORS bypass in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5814"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702904",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702904"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5814",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5814"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5814",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5814"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: CORS bypass in Blink"
    },
    {
      "cve": "CVE-2019-5815",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702905"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Blink component of the Chromium browser. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted web page, triggering heap memory corruption. This could allow the attacker to execute arbitrary code or cause an application crash resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Heap buffer overflow in Blink",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5815"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702905",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702905"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5815"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Heap buffer overflow in Blink"
    },
    {
      "cve": "CVE-2019-5818",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702908"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the media reader component of Chromium. This vulnerability allows a remote attacker to obtain sensitive information from process memory. By tricking a user into opening a specially crafted video file, an attacker can trigger an uninitialized memory read to disclose sensitive browser data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Uninitialized value in media reader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5818"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702908",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702908"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5818"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Uninitialized value in media reader"
    },
    {
      "cve": "CVE-2019-5819",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702909"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the developer tools component of the Chromium browser. Due to improper input validation and escaping, an attacker could potentially execute arbitrary code on the victim\u0027s system. To exploit this vulnerability, an attacker must trick a user into copying a specially crafted string to the clipboard while using the developer tools.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Incorrect escaping in developer tools",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5819"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702909",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702909"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5819"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Incorrect escaping in developer tools"
    },
    {
      "cve": "CVE-2019-5820",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702910"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the PDFium component of the Chromium browser. An integer overflow allows a remote attacker to cause heap memory corruption by convincing a user to open a specially crafted PDF document. Successful exploitation can lead to application instability, a denial of service (DoS), or unauthorized disclosure of sensitive memory data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5820"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702910",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702910"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5820"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Integer overflow in PDFium"
    },
    {
      "cve": "CVE-2019-5821",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702911"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the PDFium component of the Chromium browser. An integer overflow occurs when processing specially crafted PDF documents. By convincing a user to open a malicious PDF file, a remote attacker could trigger heap memory corruption, potentially leading to information disclosure or a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Integer overflow in PDFium",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5821"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702911",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702911"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5821"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Integer overflow in PDFium"
    },
    {
      "cve": "CVE-2019-5822",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702912"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the download manager component of the Chromium browser. This vulnerability allows a remote attacker to cause information disclosure by bypassing Cross-Origin Resource Sharing (CORS) security restrictions. By tricking a user into visiting a crafted web page, an attacker could access sensitive data across different web origins without authorization.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: CORS bypass in download manager",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5822"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702912",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702912"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5822",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5822"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5822",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5822"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: CORS bypass in download manager"
    },
    {
      "cve": "CVE-2019-5823",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site"
      },
      "discovery_date": "2019-04-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1702913"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in chromium-browser. Insufficient policy enforcement in service workers allows a remote attacker to bypass navigation restrictions by convincing a user to visit a crafted HTML page. This issue enables an attacker to perform forced navigation to unintended web destinations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Forced navigation from service worker",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5823"
        },
        {
          "category": "external",
          "summary": "RHBZ#1702913",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1702913"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5823",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5823"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5823",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5823"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Forced navigation from service worker"
    },
    {
      "cve": "CVE-2019-5825",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2019-05-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1707247"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the V8 component of chromium-browser. An out-of-bounds write vulnerability occurs when the engine writes data past the boundary of allocated memory. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted web page, potentially leading to arbitrary code execution, memory corruption, or a Denial of Service (DoS) through an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out-of-bounds write in V8",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5825"
        },
        {
          "category": "external",
          "summary": "RHBZ#1707247",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1707247"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5825",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5825"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5825",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5825"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2019-04-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-06-08T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Out-of-bounds write in V8"
    },
    {
      "cve": "CVE-2019-5826",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2019-05-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1707248"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the IndexedDB component of the Chromium browser. A remote attacker who has compromised a renderer process could exploit a use-after-free condition by convincing a user to visit a crafted web page. Successful exploitation could lead to memory corruption, potentially allowing arbitrary code execution or causing a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use-after-free in IndexedDB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5826"
        },
        {
          "category": "external",
          "summary": "RHBZ#1707248",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1707248"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5826",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5826"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5826",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5826"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html"
        }
      ],
      "release_date": "2019-04-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use-after-free in IndexedDB"
    },
    {
      "cve": "CVE-2020-6503",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "discovery_date": "2020-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1844476"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the accessibility component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation could lead to information disclosure by exposing sensitive data from the browser\u0027s process memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Inappropriate implementation in accessibility",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6503"
        },
        {
          "category": "external",
          "summary": "RHBZ#1844476",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844476"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6503"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Inappropriate implementation in accessibility"
    },
    {
      "cve": "CVE-2020-6504",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "discovery_date": "2020-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1844472"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the notifications component of the Chromium browser. Due to insufficient policy enforcement, a remote attacker could convince a user to visit a specially crafted web page to bypass notification restrictions. Successful exploitation allows the attacker to display unauthorized notifications to the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Insufficient policy enforcement in notifications",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
          "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-6504"
        },
        {
          "category": "external",
          "summary": "RHBZ#1844472",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1844472"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-6504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6504"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html",
          "url": "https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html"
        }
      ],
      "release_date": "2019-04-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-07T17:06:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1021"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Client-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6ComputeNode-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Server-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-0:74.0.3729.108-1.el6_10.x86_64",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.i686",
            "6Workstation-Supplementary-6.10.z:chromium-browser-debuginfo-0:74.0.3729.108-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "chromium-browser: Insufficient policy enforcement in notifications"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.