# chromium-browser 80.0.3987.149-0ubuntu0.18.04.1: chromium-browser 80.0.3987.149-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 80.0.3987.149-0ubuntu0.18.04.1, released March 23, 2020, fixes 16 CVEs in chromium-browser. One of them is being exploited (CVE-2020-6418); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-80.0.3987.149-0ubuntu0.18.04.1
- Platform: Linux
- Released: Mar 23, 2020
- Priority: Patch now (Closes CVE-2020-6418, exploited (CISA KEV))
- CVEs: 16, exploited: 1, on CISA KEV: 1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 80.0.3987.149-0ubuntu0.18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-6418](https://patchblox.com/security/data/cve/CVE-2020-6418.md) | Patch now | chromium-browser: Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap co... | n/a | 0.7881 | CISA KEV |
| [CVE-2020-10531](https://patchblox.com/security/data/cve/CVE-2020-10531.md) | High | Node.js 10: An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. | 8.8 | 0.0267 |  |
| [CVE-2020-6383](https://patchblox.com/security/data/cve/CVE-2020-6383.md) | Routine | chromium-browser: Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap co... | n/a | 0.0638 |  |
| [CVE-2020-6424](https://patchblox.com/security/data/cve/CVE-2020-6424.md) | Routine | chromium-browser: Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap... | n/a | 0.0350 |  |
| [CVE-2019-20503](https://patchblox.com/security/data/cve/CVE-2019-20503.md) | Routine | xul-ext-lightning: usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init. | 6.5 | 0.0314 |  |
| [CVE-2020-6426](https://patchblox.com/security/data/cve/CVE-2020-6426.md) | Routine | chromium-browser: Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially e... | n/a | 0.0286 |  |
| [CVE-2020-6449](https://patchblox.com/security/data/cve/CVE-2020-6449.md) | Routine | chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap... | n/a | 0.0266 |  |
| [CVE-2020-6427](https://patchblox.com/security/data/cve/CVE-2020-6427.md) | Routine | chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap... | n/a | 0.0245 |  |
| [CVE-2020-6422](https://patchblox.com/security/data/cve/CVE-2020-6422.md) | Routine | chromium-browser: Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap... | n/a | 0.0235 |  |
| [CVE-2020-6428](https://patchblox.com/security/data/cve/CVE-2020-6428.md) | Routine | chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap... | n/a | 0.0231 |  |
| [CVE-2020-6429](https://patchblox.com/security/data/cve/CVE-2020-6429.md) | Routine | chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap... | n/a | 0.0231 |  |
| [CVE-2020-6407](https://patchblox.com/security/data/cve/CVE-2020-6407.md) | Routine | chromium-browser: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potential... | n/a | 0.0178 |  |
| [CVE-2020-6386](https://patchblox.com/security/data/cve/CVE-2020-6386.md) | Routine | chromium-browser: Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit hea... | n/a | 0.0170 |  |
| [CVE-2020-6384](https://patchblox.com/security/data/cve/CVE-2020-6384.md) | Routine | chromium-browser: Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit h... | n/a | 0.0168 |  |
| [CVE-2020-6420](https://patchblox.com/security/data/cve/CVE-2020-6420.md) | Routine | chromium-browser: Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass... | n/a | 0.0133 |  |
| [CVE-2020-6425](https://patchblox.com/security/data/cve/CVE-2020-6425.md) | Routine | chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinc... | n/a | 0.0118 |  |

---

Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.