Linux · Ubuntu · Package update · July 27, 2022

chromium-browser 103.0.5060.134-0ubuntu0.18.04.1: chromium-browser 103.0.5060.134-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 103.0.5060.134-0ubuntu0.18.04.1, released July 27, 2022, fixes 46 CVEs in chromium-browser. One of them is being exploited (CVE-2022-2294); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
46
2 rated Critical
Exploited
1
CVE-2022-2294
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.7083
99th percentile

Priority of the 46 CVEs

Patch now 1 Urgent 2 High 30 Routine 13

Fixed package versions

ProductReleaseFixed in
chromium-browserUbuntu 18.04.6 LTS (bionic)103.0.5060.134-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2022-2294 Chromium: CVE-2022-2294 Heap buffer overflow in WebRTC8.8 0.7083 KEVRansomwareExploited
Urgent CVE-2022-2010 Chromium: CVE-2022-2010 Out of bounds read in compositing9.3 0.0126 None reported
Urgent CVE-2022-1853 Chromium: CVE-2022-1853 Use after free in Indexed DB9.6 0.0107 None reported
High CVE-2022-2480 Chromium: CVE-2022-2480 Use after free in Service Worker API8.8 0.1884 None reported
High CVE-2022-2415 chromium: Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploi...8.8 0.0198 None reported
High CVE-2022-2156 Chromium: CVE-2022-2156 Use after free in Base8.8 0.0153 None reported
High CVE-2022-2295 Chromium: CVE-2022-2295 Type Confusion in V88.8 0.0146 None reported
High CVE-2022-2162 Chromium: CVE-2022-2162 Insufficient policy enforcement in File System API8.8 0.0130 None reported
High CVE-2022-2481 Chromium: CVE-2022-2481 Use after free in Views8.8 0.0121 None reported
High CVE-2022-2296 chromium: Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who...8.8 0.0115 None reported
High CVE-2022-2011 Chromium: CVE-2022-2011 Use after free in ANGLE8.8 0.0111 None reported
High CVE-2022-2008 Chromium: CVE-2022-2008 Out of bounds memory access in WebGL8.8 0.0108 None reported
High CVE-2022-2158 Chromium: CVE-2022-2158 Type Confusion in V88.8 0.0106 None reported
High CVE-2022-2007 Chromium: CVE-2022-2007 Use after free in WebGPU8.8 0.0105 None reported
High CVE-2022-2157 Chromium: CVE-2022-2157 Use after free in Interest groups8.8 0.0103 None reported
High CVE-2022-2161 Chromium: CVE-2022-2161 Use after free in WebApp Provider8.8 0.0101 None reported
High CVE-2022-1855 Chromium: CVE-2022-1855 Use after free in Messaging8.8 0.0094 None reported
High CVE-2022-1874 Chromium: CVE-2022-1874 Insufficient policy enforcement in Safe Browsing8.8 0.0094 None reported
High CVE-2022-1854 Chromium: CVE-2022-1854 Use after free in ANGLE8.8 0.0090 None reported
High CVE-2022-2478 Chromium: CVE-2022-2478 Use after free in PDF8.8 0.0090 None reported
High CVE-2022-1857 Chromium: CVE-2022-1857 Insufficient policy enforcement in File System API8.8 0.0087 None reported
High CVE-2022-1866 chromium: Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who conv...8.8 0.0087 None reported
High CVE-2022-2477 Chromium: CVE-2022-2477 Use after free in Guest View8.8 0.0087 None reported
High CVE-2022-1859 Chromium: CVE-2022-1859 Use after free in Performance Manager8.8 0.0085 None reported
High CVE-2022-2163 Chromium: CVE-2022-2163 Use after free in Cast UI and Toolbar8.8 0.0084 None reported
Showing 1 to 25 of 46 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.