# chromium-browser-l10n 80.0.3987.87-0ubuntu0.18.04.1: chromium-browser-l10n 80.0.3987.87-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-browser-l10n 80.0.3987.87-0ubuntu0.18.04.1, released June 3, 2020, fixes 37 CVEs in chromium-browser-l10n. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-l10n-80.0.3987.87-0ubuntu0.18.04.1 - Platform: Linux - Released: Jun 3, 2020 - Priority: Routine (Closes 37 CVEs, none high severity) - CVEs: 37, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-browser-l10n](https://patchblox.com/security/data/product/linux/chromium-browser-l10n.md) | Ubuntu 18.04.6 LTS (bionic) | 80.0.3987.87-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-6390](https://patchblox.com/security/data/cve/CVE-2020-6390.md) | Routine | chromium-browser: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentiall... | n/a | 0.0308 | | | [CVE-2020-6402](https://patchblox.com/security/data/cve/CVE-2020-6402.md) | Routine | chromium-browser: Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who c... | n/a | 0.0266 | | | [CVE-2020-6405](https://patchblox.com/security/data/cve/CVE-2020-6405.md) | Routine | lemon: Fixed (#1804823) | 6.5 | 0.0263 | | | [CVE-2020-6385](https://patchblox.com/security/data/cve/CVE-2020-6385.md) | Routine | chromium-browser: Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass... | n/a | 0.0226 | | | [CVE-2020-6382](https://patchblox.com/security/data/cve/CVE-2020-6382.md) | Routine | chromium-browser: Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit... | n/a | 0.0226 | | | [CVE-2020-6381](https://patchblox.com/security/data/cve/CVE-2020-6381.md) | Routine | chromium-browser: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attack... | n/a | 0.0221 | | | [CVE-2020-6404](https://patchblox.com/security/data/cve/CVE-2020-6404.md) | Routine | chromium-browser: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially... | n/a | 0.0205 | | | [CVE-2020-6388](https://patchblox.com/security/data/cve/CVE-2020-6388.md) | Routine | chromium-browser: Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially expl... | n/a | 0.0204 | | | [CVE-2020-6400](https://patchblox.com/security/data/cve/CVE-2020-6400.md) | Routine | chromium-browser: Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-o... | n/a | 0.0200 | | | [CVE-2020-6415](https://patchblox.com/security/data/cve/CVE-2020-6415.md) | Routine | chromium-browser: Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potent... | n/a | 0.0199 | | | [CVE-2020-6416](https://patchblox.com/security/data/cve/CVE-2020-6416.md) | Routine | chromium-browser: Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potential... | n/a | 0.0199 | | | [CVE-2020-6399](https://patchblox.com/security/data/cve/CVE-2020-6399.md) | Routine | chromium-browser: Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak... | n/a | 0.0199 | | | [CVE-2020-6395](https://patchblox.com/security/data/cve/CVE-2020-6395.md) | Routine | chromium-browser: Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potential... | n/a | 0.0198 | | | [CVE-2020-6401](https://patchblox.com/security/data/cve/CVE-2020-6401.md) | Routine | chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacke... | n/a | 0.0195 | | | [CVE-2020-6397](https://patchblox.com/security/data/cve/CVE-2020-6397.md) | Routine | chromium-browser: Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof sec... | n/a | 0.0192 | | | [CVE-2020-6413](https://patchblox.com/security/data/cve/CVE-2020-6413.md) | Routine | chromium-browser: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML... | n/a | 0.0191 | | | [CVE-2020-6414](https://patchblox.com/security/data/cve/CVE-2020-6414.md) | Routine | chromium-browser: Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to... | n/a | 0.0186 | | | [CVE-2020-6393](https://patchblox.com/security/data/cve/CVE-2020-6393.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cro... | n/a | 0.0185 | | | [CVE-2020-6406](https://patchblox.com/security/data/cve/CVE-2020-6406.md) | Routine | chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap... | n/a | 0.0185 | | | [CVE-2020-6387](https://patchblox.com/security/data/cve/CVE-2020-6387.md) | Routine | chromium-browser: Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit... | n/a | 0.0181 | | | [CVE-2020-6398](https://patchblox.com/security/data/cve/CVE-2020-6398.md) | Routine | chromium-browser: Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially e... | n/a | 0.0179 | | | [CVE-2020-6389](https://patchblox.com/security/data/cve/CVE-2020-6389.md) | Routine | chromium-browser: Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit... | n/a | 0.0174 | | | [CVE-2020-6409](https://patchblox.com/security/data/cve/CVE-2020-6409.md) | Routine | chromium-browser: Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convince... | n/a | 0.0174 | | | [CVE-2020-6396](https://patchblox.com/security/data/cve/CVE-2020-6396.md) | Routine | chromium-browser: Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the co... | n/a | 0.0174 | | | [CVE-2020-6410](https://patchblox.com/security/data/cve/CVE-2020-6410.md) | Routine | chromium-browser: Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to con... | n/a | 0.0170 | | | [CVE-2020-6394](https://patchblox.com/security/data/cve/CVE-2020-6394.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass c... | n/a | 0.0165 | | | [CVE-2020-6408](https://patchblox.com/security/data/cve/CVE-2020-6408.md) | Routine | chromium-browser: Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain pot... | n/a | 0.0162 | | | [CVE-2020-6403](https://patchblox.com/security/data/cve/CVE-2020-6403.md) | Routine | chromium-browser: Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof... | n/a | 0.0161 | | | [CVE-2020-6412](https://patchblox.com/security/data/cve/CVE-2020-6412.md) | Routine | chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacke... | n/a | 0.0149 | | | [CVE-2020-6392](https://patchblox.com/security/data/cve/CVE-2020-6392.md) | Routine | chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convince... | n/a | 0.0148 | | | [CVE-2020-6411](https://patchblox.com/security/data/cve/CVE-2020-6411.md) | Routine | chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacke... | n/a | 0.0140 | | | [CVE-2020-6391](https://patchblox.com/security/data/cve/CVE-2020-6391.md) | Routine | chromium-browser: Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker t... | n/a | 0.0133 | | | [CVE-2020-6499](https://patchblox.com/security/data/cve/CVE-2020-6499.md) | Routine | chromium-browser: Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass A... | n/a | 0.0070 | | | [CVE-2020-6500](https://patchblox.com/security/data/cve/CVE-2020-6500.md) | Routine | chromium-browser: Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spo... | n/a | 0.0069 | | | [CVE-2020-6501](https://patchblox.com/security/data/cve/CVE-2020-6501.md) | Routine | chromium-browser: Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass con... | n/a | 0.0067 | | | [CVE-2020-6502](https://patchblox.com/security/data/cve/CVE-2020-6502.md) | Routine | chromium-browser-l10n: Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof sec... | n/a | 0.0067 | | | [CVE-2020-6417](https://patchblox.com/security/data/cve/CVE-2020-6417.md) | Routine | chromium-browser: Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute... | n/a | 0.0030 | | --- Data as of 2026-11-13T20:04:13Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.