# chromium-browser 77.0.3865.90-0ubuntu0.18.04.1: chromium-browser 77.0.3865.90-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-browser 77.0.3865.90-0ubuntu0.18.04.1, released November 25, 2019, fixes 43 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-77.0.3865.90-0ubuntu0.18.04.1 - Platform: Linux - Released: Nov 25, 2019 - Priority: Routine (Closes 43 CVEs, none high severity) - CVEs: 43, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 77.0.3865.90-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-5870](https://patchblox.com/security/data/cve/CVE-2019-5870.md) | Routine | chromium-browser: Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a san... | n/a | 0.0144 | | | [CVE-2019-5881](https://patchblox.com/security/data/cve/CVE-2019-5881.md) | Routine | chromium-browser: Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentia... | n/a | 0.0104 | | | [CVE-2019-5877](https://patchblox.com/security/data/cve/CVE-2019-5877.md) | Routine | chromium-browser: Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potenti... | n/a | 0.0101 | | | [CVE-2019-13670](https://patchblox.com/security/data/cve/CVE-2019-13670.md) | Routine | chromium-browser: Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potent... | n/a | 0.0093 | | | [CVE-2019-13687](https://patchblox.com/security/data/cve/CVE-2019-13687.md) | Routine | chromium-browser: Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap... | n/a | 0.0092 | | | [CVE-2019-13688](https://patchblox.com/security/data/cve/CVE-2019-13688.md) | Routine | chromium-browser: Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap... | n/a | 0.0092 | | | [CVE-2019-5876](https://patchblox.com/security/data/cve/CVE-2019-5876.md) | Routine | chromium-browser: Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially ex... | n/a | 0.0092 | | | [CVE-2019-13685](https://patchblox.com/security/data/cve/CVE-2019-13685.md) | Routine | chromium-browser: Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploi... | n/a | 0.0091 | | | [CVE-2019-13686](https://patchblox.com/security/data/cve/CVE-2019-13686.md) | Routine | chromium-browser: Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploi... | n/a | 0.0091 | | | [CVE-2019-5874](https://patchblox.com/security/data/cve/CVE-2019-5874.md) | Routine | chromium-browser: Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to... | n/a | 0.0091 | | | [CVE-2019-5878](https://patchblox.com/security/data/cve/CVE-2019-5878.md) | Routine | chromium-browser: Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap cor... | n/a | 0.0088 | | | [CVE-2019-13666](https://patchblox.com/security/data/cve/CVE-2019-13666.md) | Routine | chromium-browser: Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin dat... | n/a | 0.0088 | | | [CVE-2019-13683](https://patchblox.com/security/data/cve/CVE-2019-13683.md) | Routine | chromium-browser: Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker t... | n/a | 0.0088 | | | [CVE-2019-5880](https://patchblox.com/security/data/cve/CVE-2019-5880.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cro... | n/a | 0.0088 | | | [CVE-2019-13668](https://patchblox.com/security/data/cve/CVE-2019-13668.md) | Routine | chromium-browser: Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker t... | n/a | 0.0085 | | | [CVE-2019-13677](https://patchblox.com/security/data/cve/CVE-2019-13677.md) | Routine | chromium-browser: Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to... | n/a | 0.0085 | | | [CVE-2019-5871](https://patchblox.com/security/data/cve/CVE-2019-5871.md) | Routine | chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit... | n/a | 0.0084 | | | [CVE-2019-5869](https://patchblox.com/security/data/cve/CVE-2019-5869.md) | Routine | chromium-browser: Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap... | n/a | 0.0077 | | | [CVE-2019-13660](https://patchblox.com/security/data/cve/CVE-2019-13660.md) | Routine | chromium-browser: UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a... | n/a | 0.0075 | | | [CVE-2019-13682](https://patchblox.com/security/data/cve/CVE-2019-13682.md) | Routine | chromium-browser: Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote... | n/a | 0.0074 | | | [CVE-2019-13673](https://patchblox.com/security/data/cve/CVE-2019-13673.md) | Routine | chromium-browser: Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to l... | n/a | 0.0074 | | | [CVE-2019-13662](https://patchblox.com/security/data/cve/CVE-2019-13662.md) | Routine | chromium-browser: Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to by... | n/a | 0.0073 | | | [CVE-2019-13678](https://patchblox.com/security/data/cve/CVE-2019-13678.md) | Routine | chromium-browser: Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform do... | n/a | 0.0073 | | | [CVE-2019-13692](https://patchblox.com/security/data/cve/CVE-2019-13692.md) | Routine | chromium-browser: Insufficient policy enforcement in reader mode in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to by... | n/a | 0.0072 | | | [CVE-2019-13665](https://patchblox.com/security/data/cve/CVE-2019-13665.md) | Routine | chromium-browser: Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple f... | n/a | 0.0071 | | | [CVE-2019-13667](https://patchblox.com/security/data/cve/CVE-2019-13667.md) | Routine | chromium-browser: Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to sp... | n/a | 0.0069 | | | [CVE-2019-5873](https://patchblox.com/security/data/cve/CVE-2019-5873.md) | Routine | chromium-browser: Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker... | n/a | 0.0069 | | | [CVE-2019-13661](https://patchblox.com/security/data/cve/CVE-2019-13661.md) | Routine | chromium-codecs-ffmpeg: UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a... | n/a | 0.0068 | | | [CVE-2019-5872](https://patchblox.com/security/data/cve/CVE-2019-5872.md) | Routine | chromium-browser: Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap c... | n/a | 0.0067 | | | [CVE-2019-13674](https://patchblox.com/security/data/cve/CVE-2019-13674.md) | Routine | chromium-browser: IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing v... | n/a | 0.0067 | | | [CVE-2019-13669](https://patchblox.com/security/data/cve/CVE-2019-13669.md) | Routine | chromium-browser: Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the... | n/a | 0.0065 | | | [CVE-2019-13675](https://patchblox.com/security/data/cve/CVE-2019-13675.md) | Routine | chromium-browser: Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disabl... | n/a | 0.0065 | | | [CVE-2019-13659](https://patchblox.com/security/data/cve/CVE-2019-13659.md) | Routine | chromium-browser: IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing v... | n/a | 0.0064 | | | [CVE-2019-13663](https://patchblox.com/security/data/cve/CVE-2019-13663.md) | Routine | chromium-browser: IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing v... | n/a | 0.0064 | | | [CVE-2019-13681](https://patchblox.com/security/data/cve/CVE-2019-13681.md) | Routine | chromium-browser: Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass... | n/a | 0.0063 | | | [CVE-2019-13680](https://patchblox.com/security/data/cve/CVE-2019-13680.md) | Routine | chromium-browser: Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client... | n/a | 0.0063 | | | [CVE-2019-13676](https://patchblox.com/security/data/cve/CVE-2019-13676.md) | Routine | chromium-browser: Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perfo... | n/a | 0.0062 | | | [CVE-2019-5875](https://patchblox.com/security/data/cve/CVE-2019-5875.md) | Routine | chromium-browser: Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof t... | n/a | 0.0062 | | | [CVE-2019-13671](https://patchblox.com/security/data/cve/CVE-2019-13671.md) | Routine | chromium-browser: UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a craf... | n/a | 0.0060 | | | [CVE-2019-13691](https://patchblox.com/security/data/cve/CVE-2019-13691.md) | Routine | chromium-browser: Insufficient validation of untrusted input in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote atta... | n/a | 0.0060 | | | [CVE-2019-5879](https://patchblox.com/security/data/cve/CVE-2019-5879.md) | Routine | chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convince... | n/a | 0.0059 | | | [CVE-2019-13679](https://patchblox.com/security/data/cve/CVE-2019-13679.md) | Routine | chromium-browser: Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show pr... | n/a | 0.0056 | | | [CVE-2019-13664](https://patchblox.com/security/data/cve/CVE-2019-13664.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass c... | n/a | 0.0050 | | --- Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.