# chromium-browser 89.0.4389.82-0ubuntu0.18.04.1: chromium-browser 89.0.4389.82-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 89.0.4389.82-0ubuntu0.18.04.1, released January 2, 2023, fixes 96 CVEs in chromium-browser. 4 of them are being exploited (CVE-2021-21166); 4 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-89.0.4389.82-0ubuntu0.18.04.1
- Platform: Linux
- Released: Jan 2, 2023
- Priority: Patch now (Closes CVE-2021-21166, exploited (CISA KEV))
- CVEs: 96, exploited: 4, on CISA KEV: 4

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 89.0.4389.82-0ubuntu0.18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2021-21166](https://patchblox.com/security/data/cve/CVE-2021-21166.md) | Patch now | Chromium CVE-2021-21166:  Object lifecycle issue in audio | n/a | 0.2403 | CISA KEV |
| [CVE-2021-21148](https://patchblox.com/security/data/cve/CVE-2021-21148.md) | Patch now | Chromium CVE-2021-21148: Heap buffer overflow in V8 | n/a | 0.1997 | CISA KEV |
| [CVE-2020-6572](https://patchblox.com/security/data/cve/CVE-2020-6572.md) | Patch now | chromium-browser: Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code vi... | n/a | 0.1059 | CISA KEV |
| [CVE-2021-21193](https://patchblox.com/security/data/cve/CVE-2021-21193.md) | Patch now | Chromium CVE-2021-21193: Use after free in Blink | n/a | 0.0995 | CISA KEV |
| [CVE-2020-16040](https://patchblox.com/security/data/cve/CVE-2020-16040.md) | Routine | chromium-browser: Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially ex... | n/a | 0.9960 |  |
| [CVE-2021-21132](https://patchblox.com/security/data/cve/CVE-2021-21132.md) | Routine | Chromium CVE-2021-21132: Inappropriate implementation in DevTools | n/a | 0.2511 |  |
| [CVE-2021-21135](https://patchblox.com/security/data/cve/CVE-2021-21135.md) | Routine | Chromium CVE-2021-21135: Inappropriate implementation in Performance API | n/a | 0.2066 |  |
| [CVE-2021-21118](https://patchblox.com/security/data/cve/CVE-2021-21118.md) | Routine | Chromium: CVE-2021-21118 Insufficient data validation in V8 | n/a | 0.1804 |  |
| [CVE-2021-21177](https://patchblox.com/security/data/cve/CVE-2021-21177.md) | Routine | Chromium CVE-2021-21177:  Insufficient policy enforcement in Autofill | n/a | 0.1729 |  |
| [CVE-2021-21123](https://patchblox.com/security/data/cve/CVE-2021-21123.md) | Routine | Chromium CVE-2021-21123: Insufficient data validation in File System API | n/a | 0.1091 |  |
| [CVE-2021-21157](https://patchblox.com/security/data/cve/CVE-2021-21157.md) | Routine | Chromium CVE-2021-21157: Use after free in Web Sockets | n/a | 0.0946 |  |
| [CVE-2021-21126](https://patchblox.com/security/data/cve/CVE-2021-21126.md) | Routine | Chromium CVE-2021-21126: Insufficient policy enforcement in extensions | n/a | 0.0941 |  |
| [CVE-2021-21125](https://patchblox.com/security/data/cve/CVE-2021-21125.md) | Routine | Chromium CVE-2021-21125: Insufficient policy enforcement in File System API | n/a | 0.0872 |  |
| [CVE-2021-21124](https://patchblox.com/security/data/cve/CVE-2021-21124.md) | Routine | Chromium CVE-2021-21124: Potential user after free in Speech Recognizer | n/a | 0.0847 |  |
| [CVE-2021-21131](https://patchblox.com/security/data/cve/CVE-2021-21131.md) | Routine | Chromium CVE-2021-21131: Insufficient policy enforcement in File System API | n/a | 0.0825 |  |
| [CVE-2021-21122](https://patchblox.com/security/data/cve/CVE-2021-21122.md) | Routine | Chromium CVE-2021-21122: Use after free in Blink | n/a | 0.0756 |  |
| [CVE-2021-21120](https://patchblox.com/security/data/cve/CVE-2021-21120.md) | Routine | Chromium CVE-2021-21120: Use after free in WebSQL | n/a | 0.0742 |  |
| [CVE-2021-21119](https://patchblox.com/security/data/cve/CVE-2021-21119.md) | Routine | Chromium CVE-2021-21119: Use after free in Media | n/a | 0.0736 |  |
| [CVE-2021-21128](https://patchblox.com/security/data/cve/CVE-2021-21128.md) | Routine | Chromium CVE-2021-21128: Heap buffer overflow in Blink | n/a | 0.0702 |  |
| [CVE-2021-21121](https://patchblox.com/security/data/cve/CVE-2021-21121.md) | Routine | Chromium CVE-2021-21121: Use after free in Omnibox | n/a | 0.0668 |  |
| [CVE-2021-21137](https://patchblox.com/security/data/cve/CVE-2021-21137.md) | Routine | Chromium CVE-2021-21137: Inappropriate implementation in DevTools | n/a | 0.0639 |  |
| [CVE-2021-21127](https://patchblox.com/security/data/cve/CVE-2021-21127.md) | Routine | Chromium CVE-2021-21127: Insufficient policy enforcement in extensions | n/a | 0.0634 |  |
| [CVE-2021-21129](https://patchblox.com/security/data/cve/CVE-2021-21129.md) | Routine | Chromium CVE-2021-21129: Insufficient policy enforcement in File System API | n/a | 0.0588 |  |
| [CVE-2021-21130](https://patchblox.com/security/data/cve/CVE-2021-21130.md) | Routine | Chromium CVE-2021-21130: Insufficient policy enforcement in File System API | n/a | 0.0588 |  |
| [CVE-2021-21141](https://patchblox.com/security/data/cve/CVE-2021-21141.md) | Routine | Chromium CVE-2021-21141: Insufficient policy enforcement in File System API | 6.5 | 0.0587 |  |
| [CVE-2021-21134](https://patchblox.com/security/data/cve/CVE-2021-21134.md) | Routine | Chromium CVE-2021-21134: Incorrect security UI in Page Info | n/a | 0.0544 |  |
| [CVE-2021-21139](https://patchblox.com/security/data/cve/CVE-2021-21139.md) | Routine | Chromium CVE-2021-21139: Inappropriate implementation in iframe sandbox | n/a | 0.0512 |  |
| [CVE-2021-21136](https://patchblox.com/security/data/cve/CVE-2021-21136.md) | Routine | Chromium CVE-2021-21136: Insufficient policy enforcement in WebView | n/a | 0.0451 |  |
| [CVE-2021-21133](https://patchblox.com/security/data/cve/CVE-2021-21133.md) | Routine | Chromium CVE-2021-21133: Insufficient policy enforcement in Downloads | n/a | 0.0328 |  |
| [CVE-2021-21110](https://patchblox.com/security/data/cve/CVE-2021-21110.md) | Routine | chromium-chromedriver: Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perf... | n/a | 0.0310 |  |
| [CVE-2021-21156](https://patchblox.com/security/data/cve/CVE-2021-21156.md) | Routine | Chromium CVE-2021-21156: Heap buffer overflow in V8 | n/a | 0.0270 |  |
| [CVE-2021-21106](https://patchblox.com/security/data/cve/CVE-2021-21106.md) | Routine | chromium-codecs-ffmpeg: Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the... | n/a | 0.0227 |  |
| [CVE-2020-16041](https://patchblox.com/security/data/cve/CVE-2020-16041.md) | Routine | chromium-browser: Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised... | n/a | 0.0212 |  |
| [CVE-2021-21160](https://patchblox.com/security/data/cve/CVE-2021-21160.md) | Routine | Chromium CVE-2021-21160: Heap buffer overflow in WebAudio | n/a | 0.0191 |  |
| [CVE-2021-21182](https://patchblox.com/security/data/cve/CVE-2021-21182.md) | Routine | Chromium CVE-2021-21182:  Insufficient policy enforcement in navigations | n/a | 0.0187 |  |
| [CVE-2021-21168](https://patchblox.com/security/data/cve/CVE-2021-21168.md) | Routine | Chromium CVE-2021-21168:  Insufficient policy enforcement in appcache | n/a | 0.0178 |  |
| [CVE-2021-21159](https://patchblox.com/security/data/cve/CVE-2021-21159.md) | Routine | Chromium CVE-2021-21159: Heap buffer overflow in TabStrip | n/a | 0.0173 |  |
| [CVE-2021-21176](https://patchblox.com/security/data/cve/CVE-2021-21176.md) | Routine | Chromium CVE-2021-21176:  Inappropriate implementation in full screen mode | n/a | 0.0171 |  |
| [CVE-2021-21171](https://patchblox.com/security/data/cve/CVE-2021-21171.md) | Routine | Chromium CVE-2021-21171:  Incorrect security UI in TabStrip and Navigation | n/a | 0.0166 |  |
| [CVE-2021-21172](https://patchblox.com/security/data/cve/CVE-2021-21172.md) | Routine | Chromium CVE-2021-21172:  Insufficient policy enforcement in File System API | n/a | 0.0165 |  |
| [CVE-2021-21188](https://patchblox.com/security/data/cve/CVE-2021-21188.md) | Routine | Chromium CVE-2021-21188:  Use after free in Blink | n/a | 0.0163 |  |
| [CVE-2021-21180](https://patchblox.com/security/data/cve/CVE-2021-21180.md) | Routine | Chromium CVE-2021-21180:  Use after free in tab search | n/a | 0.0162 |  |
| [CVE-2021-21178](https://patchblox.com/security/data/cve/CVE-2021-21178.md) | Routine | Chromium CVE-2021-21178 :  Inappropriate implementation in Compositing | n/a | 0.0162 |  |
| [CVE-2021-21173](https://patchblox.com/security/data/cve/CVE-2021-21173.md) | Routine | Chromium CVE-2021-21173:  Side-channel information leakage in Network Internals | n/a | 0.0160 |  |
| [CVE-2021-21181](https://patchblox.com/security/data/cve/CVE-2021-21181.md) | Routine | Chromium CVE-2021-21181:  Side-channel information leakage in autofill | n/a | 0.0160 |  |
| [CVE-2021-21170](https://patchblox.com/security/data/cve/CVE-2021-21170.md) | Routine | Chromium CVE-2021-21170:  Incorrect security UI in Loader | n/a | 0.0160 |  |
| [CVE-2021-21161](https://patchblox.com/security/data/cve/CVE-2021-21161.md) | Routine | Chromium CVE-2021-21161: Heap buffer overflow in TabStrip | n/a | 0.0154 |  |
| [CVE-2021-21174](https://patchblox.com/security/data/cve/CVE-2021-21174.md) | Routine | Chromium CVE-2021-21174:  Inappropriate implementation in Referrer | n/a | 0.0150 |  |
| [CVE-2021-21190](https://patchblox.com/security/data/cve/CVE-2021-21190.md) | Routine | Chromium CVE-2021-21190 :  Uninitialized Use in PDFium | n/a | 0.0150 |  |
| [CVE-2021-21113](https://patchblox.com/security/data/cve/CVE-2021-21113.md) | Routine | chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit... | n/a | 0.0149 |  |
| [CVE-2021-21192](https://patchblox.com/security/data/cve/CVE-2021-21192.md) | Routine | Chromium CVE-2021-21192: Heap buffer overflow in tab groups | n/a | 0.0148 |  |
| [CVE-2021-21149](https://patchblox.com/security/data/cve/CVE-2021-21149.md) | Routine | Chromium CVE-2021-21149: Stack overflow in Data Transfer | n/a | 0.0147 |  |
| [CVE-2021-21189](https://patchblox.com/security/data/cve/CVE-2021-21189.md) | Routine | Chromium CVE-2021-21189:  Insufficient policy enforcement in payments | n/a | 0.0146 |  |
| [CVE-2021-21116](https://patchblox.com/security/data/cve/CVE-2021-21116.md) | Routine | chromium-browser: Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploi... | n/a | 0.0145 |  |
| [CVE-2021-21187](https://patchblox.com/security/data/cve/CVE-2021-21187.md) | Routine | Chromium CVE-2021-21187:  Insufficient data validation in URL formatting | n/a | 0.0145 |  |
| [CVE-2021-21154](https://patchblox.com/security/data/cve/CVE-2021-21154.md) | Routine | Chromium: CVE-2021-21154 Heap buffer overflow in Tab Strip | n/a | 0.0142 |  |
| [CVE-2021-21169](https://patchblox.com/security/data/cve/CVE-2021-21169.md) | Routine | Chromium CVE-2021-21169:  Out of bounds memory access in V8 | n/a | 0.0142 |  |
| [CVE-2021-21179](https://patchblox.com/security/data/cve/CVE-2021-21179.md) | Routine | Chromium CVE-2021-21179:  Use after free in Network Internals | n/a | 0.0141 |  |
| [CVE-2021-21115](https://patchblox.com/security/data/cve/CVE-2021-21115.md) | Routine | chromium-browser: User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromise... | n/a | 0.0141 |  |
| [CVE-2021-21162](https://patchblox.com/security/data/cve/CVE-2021-21162.md) | Routine | Chromium CVE-2021-21162: Use after free in WebRTC | n/a | 0.0138 |  |
| [CVE-2021-21167](https://patchblox.com/security/data/cve/CVE-2021-21167.md) | Routine | Chromium CVE-2021-21167:  Use after free in bookmarks | n/a | 0.0138 |  |
| [CVE-2021-21191](https://patchblox.com/security/data/cve/CVE-2021-21191.md) | Routine | Chromium CVE-2021-21191: Use after free in WebRTC | n/a | 0.0137 |  |
| [CVE-2021-21114](https://patchblox.com/security/data/cve/CVE-2021-21114.md) | Routine | chromium-codecs-ffmpeg-extra: Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap... | n/a | 0.0137 |  |
| [CVE-2021-21112](https://patchblox.com/security/data/cve/CVE-2021-21112.md) | Routine | chromium-browser: Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap... | n/a | 0.0137 |  |
| [CVE-2021-21108](https://patchblox.com/security/data/cve/CVE-2021-21108.md) | Routine | chromium-browser: Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the ren... | n/a | 0.0133 |  |
| [CVE-2021-21109](https://patchblox.com/security/data/cve/CVE-2021-21109.md) | Routine | chromium-browser: Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the... | n/a | 0.0133 |  |
| [CVE-2021-21155](https://patchblox.com/security/data/cve/CVE-2021-21155.md) | Routine | Chromium CVE-2021-21155: Heap buffer overflow in Tab Strip | n/a | 0.0132 |  |
| [CVE-2021-21185](https://patchblox.com/security/data/cve/CVE-2021-21185.md) | Routine | Chromium CVE-2021-21185:  Insufficient policy enforcement in extensions | n/a | 0.0129 |  |
| [CVE-2021-21152](https://patchblox.com/security/data/cve/CVE-2021-21152.md) | Routine | Chromium: CVE-2021-21152 Heap buffer overflow in Media | n/a | 0.0127 |  |
| [CVE-2021-21153](https://patchblox.com/security/data/cve/CVE-2021-21153.md) | Routine | Chromium: CVE-2021-21153 Stack overflow in GPU Process | n/a | 0.0127 |  |
| [CVE-2020-16037](https://patchblox.com/security/data/cve/CVE-2020-16037.md) | Routine | chromium-browser: Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit h... | n/a | 0.0126 |  |
| [CVE-2020-16038](https://patchblox.com/security/data/cve/CVE-2020-16038.md) | Routine | chromium-browser: Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially explo... | n/a | 0.0126 |  |
| [CVE-2020-16039](https://patchblox.com/security/data/cve/CVE-2020-16039.md) | Routine | chromium-browser: Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit... | n/a | 0.0126 |  |
| [CVE-2021-21175](https://patchblox.com/security/data/cve/CVE-2021-21175.md) | Routine | Chromium CVE-2021-21175:  Inappropriate implementation in Site isolation | n/a | 0.0118 |  |
| [CVE-2021-21150](https://patchblox.com/security/data/cve/CVE-2021-21150.md) | Routine | Chromium: CVE-2021-21150 Use after free in Downloads | n/a | 0.0117 |  |
| [CVE-2021-21146](https://patchblox.com/security/data/cve/CVE-2021-21146.md) | Routine | Chromium CVE-2021-21146: Use after free in Navigation | n/a | 0.0114 |  |
| [CVE-2021-21151](https://patchblox.com/security/data/cve/CVE-2021-21151.md) | Routine | Chromium: CVE-2021-21151 Use after free in Payments | n/a | 0.0114 |  |
| [CVE-2021-21107](https://patchblox.com/security/data/cve/CVE-2021-21107.md) | Routine | chromium-browser: Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had co... | n/a | 0.0113 |  |
| [CVE-2021-21186](https://patchblox.com/security/data/cve/CVE-2021-21186.md) | Routine | Chromium CVE-2021-21186:  Insufficient policy enforcement in QR scanning | n/a | 0.0113 |  |
| [CVE-2021-21142](https://patchblox.com/security/data/cve/CVE-2021-21142.md) | Routine | Chromium CVE-2021-21142: Use after free in Payments | n/a | 0.0112 |  |
| [CVE-2021-21165](https://patchblox.com/security/data/cve/CVE-2021-21165.md) | Routine | Chromium CVE-2021-21165:  Object lifecycle issue in audio | n/a | 0.0112 |  |
| [CVE-2020-16042](https://patchblox.com/security/data/cve/CVE-2020-16042.md) | Routine | firefox: ELSA-2020-5562-1: firefox security update (IMPORTANT) | 6.5 | 0.0111 |  |
| [CVE-2020-16043](https://patchblox.com/security/data/cve/CVE-2020-16043.md) | Routine | chromium-browser: Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypas... | n/a | 0.0109 |  |
| [CVE-2021-21111](https://patchblox.com/security/data/cve/CVE-2021-21111.md) | Routine | chromium-browser: Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a... | n/a | 0.0108 |  |
| [CVE-2021-21145](https://patchblox.com/security/data/cve/CVE-2021-21145.md) | Routine | Chromium CVE-2021-21145: Use after free in Fonts | n/a | 0.0105 |  |
| [CVE-2021-21183](https://patchblox.com/security/data/cve/CVE-2021-21183.md) | Routine | Chromium CVE-2021-21183:  Inappropriate implementation in performance APIs | n/a | 0.0104 |  |
| [CVE-2021-21184](https://patchblox.com/security/data/cve/CVE-2021-21184.md) | Routine | Chromium CVE-2021-21184: Inappropriate implementation in performance APIs | n/a | 0.0104 |  |
| [CVE-2021-21163](https://patchblox.com/security/data/cve/CVE-2021-21163.md) | Routine | Chromium CVE-2021-21163:  Insufficient data validation in Reader Mode | n/a | 0.0094 |  |
| [CVE-2021-21144](https://patchblox.com/security/data/cve/CVE-2021-21144.md) | Routine | Chromium CVE-2021-21144: Heap buffer overflow in Tab Groups | n/a | 0.0088 |  |
| [CVE-2021-21147](https://patchblox.com/security/data/cve/CVE-2021-21147.md) | Routine | Chromium CVE-2021-21147: Inappropriate implementation in Skia | n/a | 0.0086 |  |
| [CVE-2021-21143](https://patchblox.com/security/data/cve/CVE-2021-21143.md) | Routine | Chromium CVE-2021-21143: Heap buffer overflow in Extensions | n/a | 0.0083 |  |
| [CVE-2021-21164](https://patchblox.com/security/data/cve/CVE-2021-21164.md) | Routine | Chromium CVE-2021-21164:  Insufficient data validation in Chrome for iOS | n/a | 0.0081 |  |
| [CVE-2021-21140](https://patchblox.com/security/data/cve/CVE-2021-21140.md) | Routine | Chromium CVE-2021-21140: Uninitialized Use in USB | 6.8 | 0.0077 |  |
| [CVE-2021-21138](https://patchblox.com/security/data/cve/CVE-2021-21138.md) | Routine | chromium-browser: Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a s... | n/a | 0.0052 |  |
| [CVE-2021-21200](https://patchblox.com/security/data/cve/CVE-2021-21200.md) | Routine | chromium: Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an o... | 5.4 | 0.0047 |  |
| [CVE-2021-21117](https://patchblox.com/security/data/cve/CVE-2021-21117.md) | Routine | chromium-browser: Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perf... | n/a | 0.0022 |  |

---

Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.