Linux · Ubuntu · Package update · September 21, 2020

chromium-browser 85.0.4183.83-0ubuntu0.18.04.2: chromium-browser 85.0.4183.83-0ubuntu0.18.04.2 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 85.0.4183.83-0ubuntu0.18.04.2, released September 21, 2020, fixes 29 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
29
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.2774
98th percentile

Priority of the 29 CVEs

Patch now 0 Urgent 0 High 0 Routine 29

Fixed package versions

ProductReleaseFixed in
chromium-browserUbuntu 18.04.6 LTS (bionic)85.0.4183.83-0ubuntu0.18.04.2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2020-6551 chromium-browser: Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap...n/a 0.2774 None reported
Routine CVE-2020-6549 chromium-browser: Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap...n/a 0.2754 None reported
Routine CVE-2020-6550 chromium-browser: Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit...n/a 0.2754 None reported
Routine CVE-2020-6556 chromium-browser: Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially...n/a 0.0329 None reported
Routine CVE-2020-6548 chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised th...n/a 0.0261 None reported
Routine CVE-2020-6559 chromium-browser: Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially ex...n/a 0.0230 None reported
Routine CVE-2020-6555 chromium-browser: Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially s...n/a 0.0216 None reported
Routine CVE-2020-6542 chromium-browser: Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap...n/a 0.0203 None reported
Routine CVE-2020-6558 chromium-browser: Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to...n/a 0.0179 None reported
Routine CVE-2020-6563 chromium-browser: Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote...n/a 0.0169 None reported
Routine CVE-2020-6560 chromium-browser: Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak...n/a 0.0165 None reported
Routine CVE-2020-6566 chromium-browser: Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cro...n/a 0.0157 None reported
Routine CVE-2020-6564 chromium-browser: Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof...n/a 0.0155 None reported
Routine CVE-2020-6561 chromium-browser: Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attac...n/a 0.0152 None reported
Routine CVE-2020-6552 chromium-browser: Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap...n/a 0.0152 None reported
Routine CVE-2020-6553 chromium-browser: Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentiall...n/a 0.0152 None reported
Routine CVE-2020-6567 chromium-browser: Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83...n/a 0.0150 None reported
Routine CVE-2020-6568 chromium-browser: Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote...n/a 0.0150 None reported
Routine CVE-2020-6562 chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cro...n/a 0.0150 None reported
Routine CVE-2020-6565 chromium-browser: Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to sp...n/a 0.0149 None reported
Routine CVE-2020-6543 chromium-browser: Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially ex...n/a 0.0138 None reported
Routine CVE-2020-6544 chromium-browser: Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap...n/a 0.0138 None reported
Routine CVE-2020-6545 chromium-browser: Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap...n/a 0.0137 None reported
Routine CVE-2020-6571 chromium-browser: Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform d...n/a 0.0131 None reported
Routine CVE-2020-6569 chromium-browser: Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the r...n/a 0.0127 None reported
Showing 1 to 25 of 29 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.