{
  "fix": "chromium-codecs-ffmpeg 109.0.5414.74-0ubuntu0.18.04.14",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-109.0.5414.74-0ubuntu0.18.04.14",
  "summary": "chromium-codecs-ffmpeg 109.0.5414.74-0ubuntu0.18.04.14, released January 10, 2023, fixes 20 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2022-4262); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-codecs-ffmpeg 109.0.5414.74-0ubuntu0.18.04.14 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2023-01-10T12:15:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2022-4262, exploited (CISA KEV)",
  "supported": false,
  "cveCount": 20,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.2351,
  "maxCvss": 8.8,
  "appliesTo": [
    {
      "product": "chromium-codecs-ffmpeg",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-codecs-ffmpeg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "109.0.5414.74-0ubuntu0.18.04.14",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-4262",
      "url": "https://patchblox.com/security/cve/CVE-2022-4262",
      "title": "Chromium: CVE-2022-4262 Type Confusion in V8",
      "priority": "Patch now",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.2351,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0138",
      "url": "https://patchblox.com/security/cve/CVE-2023-0138",
      "title": "Chromium:CVE-2023-0138: Heap buffer overflow in libphonenumber",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00746,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-4437",
      "url": "https://patchblox.com/security/cve/CVE-2022-4437",
      "title": "Chromium: CVE-2022-4437 Use after free in Mojo IPC",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-4438",
      "url": "https://patchblox.com/security/cve/CVE-2022-4438",
      "title": "Chromium: CVE-2022-4438 Use after free in Blink Frames",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0136",
      "url": "https://patchblox.com/security/cve/CVE-2023-0136",
      "title": "Chromium:CVE-2023-0136: Inappropriate implementation in Fullscreen API",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0069,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-4436",
      "url": "https://patchblox.com/security/cve/CVE-2022-4436",
      "title": "Chromium: CVE-2022-4436 Use after free in Blink Media",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0067,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-4440",
      "url": "https://patchblox.com/security/cve/CVE-2022-4440",
      "title": "Chromium: CVE-2022-4440 Use after free in Profiles",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00652,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0128",
      "url": "https://patchblox.com/security/cve/CVE-2023-0128",
      "title": "chromium: chromium - security update",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-4439",
      "url": "https://patchblox.com/security/cve/CVE-2022-4439",
      "title": "Chromium: CVE-2022-4439 Use after free in Aura",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0129",
      "url": "https://patchblox.com/security/cve/CVE-2023-0129",
      "title": "Chromium:CVE-2023-0129: Heap buffer overflow in Network Service",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00537,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0137",
      "url": "https://patchblox.com/security/cve/CVE-2023-0137",
      "title": "chromium: Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who co...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00536,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0134",
      "url": "https://patchblox.com/security/cve/CVE-2023-0134",
      "title": "Chromium:CVE-2023-0134: Use after free in Cart",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0135",
      "url": "https://patchblox.com/security/cve/CVE-2023-0135",
      "title": "Chromium:CVE-2023-0135: Use after free in Cart",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0141",
      "url": "https://patchblox.com/security/cve/CVE-2023-0141",
      "title": "Chromium:CVE-2023-0141: Insufficient policy enforcement in CORS",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.3,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0131",
      "url": "https://patchblox.com/security/cve/CVE-2023-0131",
      "title": "Chromium:CVE-2023-0131: Inappropriate implementation in iframe Sandbox",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0139",
      "url": "https://patchblox.com/security/cve/CVE-2023-0139",
      "title": "Chromium:CVE-2023-0139: Insufficient validation of untrusted input in Downloads",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00626,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0140",
      "url": "https://patchblox.com/security/cve/CVE-2023-0140",
      "title": "Chromium:CVE-2023-0140: Inappropriate implementation in File System API",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00626,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0130",
      "url": "https://patchblox.com/security/cve/CVE-2023-0130",
      "title": "Chromium:CVE-2023-0130: Inappropriate implementation in Fullscreen API",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00603,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0133",
      "url": "https://patchblox.com/security/cve/CVE-2023-0133",
      "title": "Chromium:CVE-2023-0133: Inappropriate implementation in Permission prompts",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00603,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0132",
      "url": "https://patchblox.com/security/cve/CVE-2023-0132",
      "title": "Chromium:CVE-2023-0132: Inappropriate implementation in Permission prompts",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T01:58:51Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}