# chromium-codecs-ffmpeg 86.0.4240.75-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 86.0.4240.75-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 86.0.4240.75-0ubuntu0.18.04.1, released November 2, 2020, fixes 27 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-86.0.4240.75-0ubuntu0.18.04.1 - Platform: Linux - Released: Nov 2, 2020 - Priority: High (Closes CVE-2020-15969, high severity) - CVEs: 27, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 86.0.4240.75-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-15969](https://patchblox.com/security/data/cve/CVE-2020-15969.md) | High | firefox: ELSA-2020-4317: firefox security update (IMPORTANT) | 8.8 | 0.0174 | | | [CVE-2020-15972](https://patchblox.com/security/data/cve/CVE-2020-15972.md) | Routine | chromium-browser: Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap... | n/a | 0.0248 | | | [CVE-2020-15985](https://patchblox.com/security/data/cve/CVE-2020-15985.md) | Routine | chromium-browser-l10n: Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof secur... | n/a | 0.0164 | | | [CVE-2020-15979](https://patchblox.com/security/data/cve/CVE-2020-15979.md) | Routine | chromium-browser: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially ex... | n/a | 0.0160 | | | [CVE-2020-15968](https://patchblox.com/security/data/cve/CVE-2020-15968.md) | Routine | chromium-browser: Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap... | n/a | 0.0154 | | | [CVE-2020-6557](https://patchblox.com/security/data/cve/CVE-2020-6557.md) | Routine | chromium-browser: Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perfor... | n/a | 0.0152 | | | [CVE-2020-15978](https://patchblox.com/security/data/cve/CVE-2020-15978.md) | Routine | chromium-browser: Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacke... | n/a | 0.0151 | | | [CVE-2020-15974](https://patchblox.com/security/data/cve/CVE-2020-15974.md) | Routine | chromium-browser: Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation v... | n/a | 0.0149 | | | [CVE-2020-15976](https://patchblox.com/security/data/cve/CVE-2020-15976.md) | Routine | chromium-browser: Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially ex... | n/a | 0.0149 | | | [CVE-2020-15977](https://patchblox.com/security/data/cve/CVE-2020-15977.md) | Routine | chromium-browser: Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to o... | n/a | 0.0149 | | | [CVE-2020-15991](https://patchblox.com/security/data/cve/CVE-2020-15991.md) | Routine | chromium-browser: Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromis... | n/a | 0.0145 | | | [CVE-2020-15992](https://patchblox.com/security/data/cve/CVE-2020-15992.md) | Routine | chromium-browser: Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who ha... | n/a | 0.0142 | | | [CVE-2020-15990](https://patchblox.com/security/data/cve/CVE-2020-15990.md) | Routine | chromium-browser: Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the r... | n/a | 0.0140 | | | [CVE-2020-15967](https://patchblox.com/security/data/cve/CVE-2020-15967.md) | Routine | chromium-browser: Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a... | n/a | 0.0139 | | | [CVE-2020-15970](https://patchblox.com/security/data/cve/CVE-2020-15970.md) | Routine | chromium-browser: Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the render... | n/a | 0.0139 | | | [CVE-2020-15971](https://patchblox.com/security/data/cve/CVE-2020-15971.md) | Routine | chromium-browser: Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the r... | n/a | 0.0139 | | | [CVE-2020-15981](https://patchblox.com/security/data/cve/CVE-2020-15981.md) | Routine | chromium-browser: Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially se... | n/a | 0.0139 | | | [CVE-2020-15982](https://patchblox.com/security/data/cve/CVE-2020-15982.md) | Routine | chromium-browser: Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain pote... | n/a | 0.0139 | | | [CVE-2020-15975](https://patchblox.com/security/data/cve/CVE-2020-15975.md) | Routine | chromium-browser: Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially explo... | n/a | 0.0138 | | | [CVE-2020-15986](https://patchblox.com/security/data/cve/CVE-2020-15986.md) | Routine | chromium-browser: Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit hea... | n/a | 0.0134 | | | [CVE-2020-15984](https://patchblox.com/security/data/cve/CVE-2020-15984.md) | Routine | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to... | n/a | 0.0130 | | | [CVE-2020-15988](https://patchblox.com/security/data/cve/CVE-2020-15988.md) | Routine | chromium-browser: Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attac... | n/a | 0.0121 | | | [CVE-2020-15989](https://patchblox.com/security/data/cve/CVE-2020-15989.md) | Routine | chromium-browser: Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially s... | n/a | 0.0113 | | | [CVE-2020-15987](https://patchblox.com/security/data/cve/CVE-2020-15987.md) | Routine | chromium-browser: Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap... | n/a | 0.0106 | | | [CVE-2020-15973](https://patchblox.com/security/data/cve/CVE-2020-15973.md) | Routine | chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convince... | n/a | 0.0103 | | | [CVE-2020-15983](https://patchblox.com/security/data/cve/CVE-2020-15983.md) | Routine | chromium-browser: Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to... | n/a | 0.0029 | | | [CVE-2020-15980](https://patchblox.com/security/data/cve/CVE-2020-15980.md) | Routine | chromium-browser: Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker... | n/a | 0.0025 | | --- Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.