Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.

This update for chromium fixes the following issues :

Chromium was updated to 83.0.4103.97 (boo#1171910,bsc#1172496) :

  - CVE-2020-6463: Use after free in ANGLE (boo#1170107     boo#1171975).

  - CVE-2020-6465: Use after free in reader mode. Reported     by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-04-21

  - CVE-2020-6466: Use after free in media. Reported by Zhe     Jin from cdsrc of Qihoo 360 on 2020-04-26

  - CVE-2020-6467: Use after free in WebRTC. Reported by     ZhanJia Song on 2020-04-06

  - CVE-2020-6468: Type Confusion in V8. Reported by Chris     Salls and Jake Corina of Seaside Security, Chani Jindal     of Shellphish on 2020-04-30

  - CVE-2020-6469: Insufficient policy enforcement in     developer tools. Reported by David Erceg on 2020-04-02

  - CVE-2020-6470: Insufficient validation of untrusted     input in clipboard. Reported by Micha&#x142; Bentkowski     of Securitum on 2020-03-30

  - CVE-2020-6471: Insufficient policy enforcement in     developer tools. Reported by David Erceg on 2020-03-08

  - CVE-2020-6472: Insufficient policy enforcement in     developer tools. Reported by David Erceg on 2020-03-25

  - CVE-2020-6473: Insufficient policy enforcement in Blink.
    Reported by Soroush Karami and Panagiotis Ilia on     2020-02-06

  - CVE-2020-6474: Use after free in Blink. Reported by Zhe     Jin from cdsrc of Qihoo 360 on 2020-03-07

  - CVE-2020-6475: Incorrect security UI in full screen.
    Reported by Khalil Zhani on 2019-10-31

  - CVE-2020-6476: Insufficient policy enforcement in tab     strip. Reported by Alexandre Le Borgne on 2019-12-18

  - CVE-2020-6477: Inappropriate implementation in     installer. Reported by RACK911 Labs on 2019-03-26

  - CVE-2020-6478: Inappropriate implementation in full     screen. Reported by Khalil Zhani on 2019-12-24

  - CVE-2020-6479: Inappropriate implementation in sharing.
    Reported by Zhong Zhaochen of andsecurity.cn on     2020-01-14

  - CVE-2020-6480: Insufficient policy enforcement in     enterprise. Reported by Marvin Witt on 2020-02-21

  - CVE-2020-6481: Insufficient policy enforcement in URL     formatting. Reported by Rayyan Bijoora on 2020-04-07

  - CVE-2020-6482: Insufficient policy enforcement in     developer tools. Reported by Abdulrahman Alqabandi     (@qab) on 2017-12-17

  - CVE-2020-6483: Insufficient policy enforcement in     payments. Reported by Jun Kokatsu, Microsoft Browser     Vulnerability Research on 2019-05-23

  - CVE-2020-6484: Insufficient data validation in     ChromeDriver. Reported by Artem Zinenko on 2020-01-26

  - CVE-2020-6485: Insufficient data validation in media     router. Reported by Sergei Glazunov of Google Project     Zero on 2020-01-30

  - CVE-2020-6486: Insufficient policy enforcement in     navigations. Reported by David Erceg on 2020-02-24

  - CVE-2020-6487: Insufficient policy enforcement in     downloads. Reported by Jun Kokatsu (@shhnjk) on     2015-10-06

  - CVE-2020-6488: Insufficient policy enforcement in     downloads. Reported by David Erceg on 2020-01-21

  - CVE-2020-6489: Inappropriate implementation in developer     tools. Reported by @lovasoa (Ophir LOJKINE) on     2020-02-10

  - CVE-2020-6490: Insufficient data validation in loader.
    Reported by Twitter on 2019-12-19

  - CVE-2020-6491: Incorrect security UI in site     information. Reported by Sultan Haikal M.A on 2020-02-07

  - CVE-2020-6493: Use after free in WebAuthentication.

  - CVE-2020-6494: Incorrect security UI in payments.

  - CVE-2020-6495: Insufficient policy enforcement in     developer tools.

  - CVE-2020-6496: Use after free in payments.

Update to 83.0.4103.116. Fixes CVE-2020-6509.

----

Black Lives Matter. Saying this does not mean that other lives do not matter. It should not be controversial to say this. If I say Chromium updates matter, it does not mean that other Fedora packages do not matter, it means that a Chromium update is needed to fix this giant pile of severe security vulnerabilities, here, today, now :

CVE-2020-6463 CVE-2020-6465 CVE-2020-6466 CVE-2020-6467 CVE-2020-6468 CVE-2020-6469 CVE-2020-6470 CVE-2020-6471 CVE-2020-6472 CVE-2020-6473 CVE-2020-6474 CVE-2020-6475 CVE-2020-6476 CVE-2020-6478 CVE-2020-6479 CVE-2020-6480 CVE-2020-6481 CVE-2020-6482 CVE-2020-6483 CVE-2020-6484 CVE-2020-6485 CVE-2020-6486 CVE-2020-6487 CVE-2020-6488 CVE-2020-6489 CVE-2020-6490 CVE-2020-6491 CVE-2020-6505 CVE-2020-6506 CVE-6507

In making that analogy, I do not intend to trivialize BLM. In no way do I mean to compare the lives of people to a silly web browser update. People are infinitely important than software. But since I'm here to push this software update out, I am also choosing to say clearly and unambiguously that Black Lives Matter. 

Open Source proves that many voices, many contributions, together can change the world. It depends on it. This is my voice.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 83.0.4103.116. Fixes CVE-2020-6509.

----

Black Lives Matter. Saying this does not mean that other lives do not matter. It should not be controversial to say this. If I say Chromium updates matter, it does not mean that other Fedora packages do not matter, it means that a Chromium update is needed to fix this giant pile of severe security vulnerabilities, here, today, now :

CVE-2020-6463 CVE-2020-6465 CVE-2020-6466 CVE-2020-6467 CVE-2020-6468 CVE-2020-6469 CVE-2020-6470 CVE-2020-6471 CVE-2020-6472 CVE-2020-6473 CVE-2020-6474 CVE-2020-6475 CVE-2020-6476 CVE-2020-6478 CVE-2020-6479 CVE-2020-6480 CVE-2020-6481 CVE-2020-6482 CVE-2020-6483 CVE-2020-6484 CVE-2020-6485 CVE-2020-6486 CVE-2020-6487 CVE-2020-6488 CVE-2020-6489 CVE-2020-6490 CVE-2020-6491 CVE-2020-6505 CVE-2020-6506 CVE-2020-6507

In making that analogy, I do not intend to trivialize BLM. In no way do I mean to compare the lives of people to a silly web browser update. People are infinitely important than software. But since I'm here to push this software update out, I am also choosing to say clearly and unambiguously that Black Lives Matter. 

Open Source proves that many voices, many contributions, together can change the world. It depends on it. This is my voice.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202006-02 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

Google Chrome Releases reports :

This release includes 38 security fixes, including CVEs CVE-2020-6465 through CVE-2020-6491.

The version of Google Chrome installed on the remote Windows host is prior to 83.0.4103.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_05_stable-channel-update-for-desktop_19 advisory.

  - Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2020-6474)

  - Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an     attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via     a crafted Chrome Extension. (CVE-2020-6469, CVE-2020-6471)

  - Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker     who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-6465)

  - Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-6466)

  - Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2020-6467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 83.0.4103.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_05_stable-channel-update-for-desktop_19 advisory.

  - Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2020-6474)

  - Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an     attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via     a crafted Chrome Extension. (CVE-2020-6469, CVE-2020-6471)

  - Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker     who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-6465)

  - Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-6466)

  - Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2020-6467)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
138688	openSUSE Security Update : chromium (openSUSE-2020-823)	Nessus	SuSE Local Security Checks	Local	critical
138194	Fedora 31 : chromium (2020-77f89ab772)	Nessus	Fedora Local Security Checks	Local	critical
138069	Fedora 32 : chromium (2020-08561721ad)	Nessus	Fedora Local Security Checks	Local	critical
137440	GLSA-202006-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
136849	FreeBSD : chromium -- multiple vulnerabilities (38c676bd-9def-11ea-a94c-3065ec8fd3ec)	Nessus	FreeBSD Local Security Checks	Local	critical
136743	Google Chrome < 83.0.4103.61 Multiple Vulnerabilities	Nessus	Windows	Local	critical
136742	Google Chrome < 83.0.4103.61 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2020-6477

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical