Linux · Ubuntu · Package update · June 3, 2020

chromium-browser 81.0.4044.122-0ubuntu0.18.04.1: chromium-browser 81.0.4044.122-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 81.0.4044.122-0ubuntu0.18.04.1, released June 3, 2020, fixes 32 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
32
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0327
88th percentile

Priority of the 32 CVEs

Patch now 0 Urgent 0 High 1 Routine 31

Fixed package versions

ProductReleaseFixed in
chromium-browserUbuntu 18.04.6 LTS (bionic)81.0.4044.122-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2020-6463 firefox: ELSA-2020-3241: firefox security update (IMPORTANT)8.8 0.0327 None reported
Routine CVE-2020-6455 chromium-browser: Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit...n/a 0.0203 None reported
Routine CVE-2020-6442 chromium-browser: Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-...n/a 0.0195 None reported
Routine CVE-2020-6445 chromium-browser: Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...n/a 0.0195 None reported
Routine CVE-2020-6430 chromium-browser: Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap cor...n/a 0.0194 None reported
Routine CVE-2020-6447 chromium-browser: Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who...n/a 0.0188 None reported
Routine CVE-2020-6452 chromium-browser: Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploi...n/a 0.0186 None reported
Routine CVE-2020-6443 chromium-browser: Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who...n/a 0.0185 None reported
Routine CVE-2020-6439 chromium-browser: Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to by...n/a 0.0182 None reported
Routine CVE-2020-6441 chromium-browser: Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass...n/a 0.0177 None reported
Routine CVE-2020-6437 chromium-browser: Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof sec...n/a 0.0176 None reported
Routine CVE-2020-6448 chromium-browser: Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap cor...n/a 0.0174 None reported
Routine CVE-2020-6432 chromium-browser: Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to by...n/a 0.0174 None reported
Routine CVE-2020-6423 chromium-browser: Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap...n/a 0.0172 None reported
Routine CVE-2020-6434 chromium-browser: Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit he...n/a 0.0170 None reported
Routine CVE-2020-6433 chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to byp...n/a 0.0166 None reported
Routine CVE-2020-6435 chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who ha...n/a 0.0166 None reported
Routine CVE-2020-6446 chromium-browser: Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...n/a 0.0166 None reported
Routine CVE-2020-6436 chromium-browser: Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially e...n/a 0.0163 None reported
Routine CVE-2020-6431 chromium-browser: Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to sp...n/a 0.0159 None reported
Routine CVE-2020-6450 chromium-browser: Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit h...n/a 0.0149 None reported
Routine CVE-2020-6451 chromium-browser: Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit h...n/a 0.0149 None reported
Routine CVE-2020-6454 chromium-browser: Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to insta...n/a 0.0144 None reported
Routine CVE-2020-6456 chromium-browser: Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attack...n/a 0.0142 None reported
Routine CVE-2020-6444 chromium-browser: Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit h...n/a 0.0139 None reported
Showing 1 to 25 of 32 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.