# chromium-browser 84.0.4147.105-0ubuntu0.18.04.1: chromium-browser 84.0.4147.105-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-browser 84.0.4147.105-0ubuntu0.18.04.1, released November 2, 2021, fixes 39 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-84.0.4147.105-0ubuntu0.18.04.1 - Platform: Linux - Released: Nov 2, 2021 - Priority: Routine (Closes 39 CVEs, none high severity) - CVEs: 39, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 84.0.4147.105-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-6541](https://patchblox.com/security/data/cve/CVE-2020-6541.md) | Routine | chromium-browser: Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit hea... | n/a | 0.2161 | | | [CVE-2020-6507](https://patchblox.com/security/data/cve/CVE-2020-6507.md) | Routine | chromium-browser: Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit he... | n/a | 0.1908 | | | [CVE-2020-6519](https://patchblox.com/security/data/cve/CVE-2020-6519.md) | Routine | chromium-browser: Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security poli... | n/a | 0.1027 | | | [CVE-2020-6514](https://patchblox.com/security/data/cve/CVE-2020-6514.md) | Routine | chromium-browser-l10n: Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged net... | 6.5 | 0.0779 | | | [CVE-2020-6516](https://patchblox.com/security/data/cve/CVE-2020-6516.md) | Routine | chromium-browser: Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via... | n/a | 0.0477 | | | [CVE-2020-6506](https://patchblox.com/security/data/cve/CVE-2020-6506.md) | Routine | chromium-browser: Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attack... | n/a | 0.0372 | | | [CVE-2020-6513](https://patchblox.com/security/data/cve/CVE-2020-6513.md) | Routine | chromium-browser: Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploi... | n/a | 0.0297 | | | [CVE-2020-6512](https://patchblox.com/security/data/cve/CVE-2020-6512.md) | Routine | chromium-browser: Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap cor... | n/a | 0.0295 | | | [CVE-2020-6524](https://patchblox.com/security/data/cve/CVE-2020-6524.md) | Routine | chromium-browser: Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially expl... | n/a | 0.0288 | | | [CVE-2020-6517](https://patchblox.com/security/data/cve/CVE-2020-6517.md) | Routine | chromium-browser: Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially explo... | n/a | 0.0279 | | | [CVE-2020-6523](https://patchblox.com/security/data/cve/CVE-2020-6523.md) | Routine | chromium-browser: Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit h... | n/a | 0.0272 | | | [CVE-2020-6520](https://patchblox.com/security/data/cve/CVE-2020-6520.md) | Routine | chromium-browser: Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap... | n/a | 0.0270 | | | [CVE-2020-6518](https://patchblox.com/security/data/cve/CVE-2020-6518.md) | Routine | chromium-browser: Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced... | n/a | 0.0255 | | | [CVE-2020-6515](https://patchblox.com/security/data/cve/CVE-2020-6515.md) | Routine | chromium-browser: Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit h... | n/a | 0.0251 | | | [CVE-2020-6533](https://patchblox.com/security/data/cve/CVE-2020-6533.md) | Routine | chromium-browser: Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap cor... | n/a | 0.0224 | | | [CVE-2020-6534](https://patchblox.com/security/data/cve/CVE-2020-6534.md) | Routine | chromium-browser: Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploi... | n/a | 0.0191 | | | [CVE-2020-6525](https://patchblox.com/security/data/cve/CVE-2020-6525.md) | Routine | chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit... | n/a | 0.0186 | | | [CVE-2020-6493](https://patchblox.com/security/data/cve/CVE-2020-6493.md) | Routine | chromium-browser: Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromi... | n/a | 0.0172 | | | [CVE-2020-6526](https://patchblox.com/security/data/cve/CVE-2020-6526.md) | Routine | chromium-browser: Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to by... | n/a | 0.0171 | | | [CVE-2020-6521](https://patchblox.com/security/data/cve/CVE-2020-6521.md) | Routine | chromium-browser: Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obta... | n/a | 0.0170 | | | [CVE-2020-6511](https://patchblox.com/security/data/cve/CVE-2020-6511.md) | Routine | chromium-codecs-ffmpeg-extra: Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak... | n/a | 0.0169 | | | [CVE-2020-6522](https://patchblox.com/security/data/cve/CVE-2020-6522.md) | Routine | chromium-browser: Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote at... | n/a | 0.0163 | | | [CVE-2020-6510](https://patchblox.com/security/data/cve/CVE-2020-6510.md) | Routine | chromium-browser: Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentia... | n/a | 0.0158 | | | [CVE-2020-6531](https://patchblox.com/security/data/cve/CVE-2020-6531.md) | Routine | chromium-browser: Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker t... | n/a | 0.0157 | | | [CVE-2020-6537](https://patchblox.com/security/data/cve/CVE-2020-6537.md) | Routine | chromium-browser: Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code insi... | n/a | 0.0155 | | | [CVE-2020-6527](https://patchblox.com/security/data/cve/CVE-2020-6527.md) | Routine | chromium-browser: Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass con... | n/a | 0.0154 | | | [CVE-2020-6528](https://patchblox.com/security/data/cve/CVE-2020-6528.md) | Routine | chromium-browser: Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof... | n/a | 0.0151 | | | [CVE-2020-6540](https://patchblox.com/security/data/cve/CVE-2020-6540.md) | Routine | chromium-codecs-ffmpeg-extra: Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap... | n/a | 0.0151 | | | [CVE-2020-6530](https://patchblox.com/security/data/cve/CVE-2020-6530.md) | Routine | chromium-browser: Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinc... | n/a | 0.0149 | | | [CVE-2020-6536](https://patchblox.com/security/data/cve/CVE-2020-6536.md) | Routine | chromium-browser: Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the... | n/a | 0.0142 | | | [CVE-2020-6535](https://patchblox.com/security/data/cve/CVE-2020-6535.md) | Routine | chromium-browser: Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compro... | n/a | 0.0137 | | | [CVE-2020-6529](https://patchblox.com/security/data/cve/CVE-2020-6529.md) | Routine | chromium-browser: Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged net... | n/a | 0.0131 | | | [CVE-2020-6532](https://patchblox.com/security/data/cve/CVE-2020-6532.md) | Routine | chromium-browser: Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap... | n/a | 0.0129 | | | [CVE-2020-6539](https://patchblox.com/security/data/cve/CVE-2020-6539.md) | Routine | chromium-browser: Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap c... | n/a | 0.0112 | | | [CVE-2020-6495](https://patchblox.com/security/data/cve/CVE-2020-6495.md) | Routine | chromium-browser: Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who con... | n/a | 0.0110 | | | [CVE-2020-6538](https://patchblox.com/security/data/cve/CVE-2020-6538.md) | Routine | chromium-browser: Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker... | n/a | 0.0102 | | | [CVE-2020-6505](https://patchblox.com/security/data/cve/CVE-2020-6505.md) | Routine | chromium-browser: Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a s... | n/a | 0.0098 | | | [CVE-2020-6509](https://patchblox.com/security/data/cve/CVE-2020-6509.md) | Routine | chromium-chromedriver: Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to inst... | n/a | 0.0081 | | | [CVE-2020-6492](https://patchblox.com/security/data/cve/CVE-2020-6492.md) | Routine | chromium-browser: Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a san... | n/a | 0.0072 | | --- Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.