Linux · Ubuntu · Package update · January 2, 2023

chromium-chromedriver 97.0.4692.71-0ubuntu0.18.04.1: chromium-chromedriver 97.0.4692.71-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-chromedriver 97.0.4692.71-0ubuntu0.18.04.1, released January 2, 2023, fixes 66 CVEs in chromium-chromedriver. One of them is being exploited (CVE-2021-4102); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
66
2 rated Critical
Exploited
1
CVE-2021-4102
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0784
94th percentile

Priority of the 66 CVEs

Patch now 1 Urgent 2 High 42 Routine 21

Fixed package versions

ProductReleaseFixed in
chromium-chromedriverUbuntu 18.04.6 LTS (bionic)97.0.4692.71-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2021-4102 Chromium: CVE-2021-4102 Use after free in V88.8 0.0784 KEVExploited
Urgent CVE-2021-38013 Chromium: CVE-2021-38013 Heap buffer overflow in fingerprint recognition9.6 0.0104 None reported
Urgent CVE-2022-0097 Chromium: CVE-2022-0097 Inappropriate implementation in DevTools9.6 0.0089 None reported
High CVE-2021-4057 Chromium: CVE-2021-4057 Use after free in file API8.8 0.0216 None reported
High CVE-2022-0100 Chromium: CVE-2022-0100 Heap buffer overflow in Media streams API8.8 0.0150 None reported
High CVE-2022-0115 Chromium: CVE-2022-0115 Uninitialized Use in File API8.8 0.0150 None reported
High CVE-2021-4062 Chromium: CVE-2021-4062 Heap buffer overflow in BFCache8.8 0.0148 None reported
High CVE-2021-4056 Chromium: CVE-2021-4056: Type Confusion in loader8.8 0.0143 None reported
High CVE-2021-4058 Chromium: CVE-2021-4058 Heap buffer overflow in ANGLE8.8 0.0143 None reported
High CVE-2021-4061 Chromium: CVE-2021-4061 Type Confusion in V88.8 0.0143 None reported
High CVE-2022-0101 Chromium: CVE-2022-0101 Heap buffer overflow in Bookmarks8.8 0.0141 None reported
High CVE-2021-38008 Chromium: CVE-2021-38008 Use after free in media8.8 0.0141 None reported
High CVE-2021-4063 Chromium: CVE-2021-4063 Use after free in developer tools8.8 0.0136 None reported
High CVE-2022-0104 Chromium: CVE-2022-0104 Heap buffer overflow in ANGLE8.8 0.0134 None reported
High CVE-2022-0096 Chromium: CVE-2022-0096 Use after free in Storage8.8 0.0134 None reported
High CVE-2021-4064 Chromium: CVE-2021-4064 Use after free in screen capture8.8 0.0132 None reported
High CVE-2021-4066 Chromium: CVE-2021-4066 Integer underflow in ANGLE8.8 0.0132 None reported
High CVE-2022-0102 Chromium: CVE-2022-0102 Type Confusion in V88.8 0.0131 None reported
High CVE-2022-0114 Chromium: CVE-2022-0114 Out of bounds memory access in Web Serial8.1 0.0131 None reported
High CVE-2022-0106 Chromium: CVE-2022-0106 Use after free in Autofill8.8 0.0131 None reported
High CVE-2022-0105 Chromium: CVE-2022-0105 Use after free in PDF8.8 0.0129 None reported
High CVE-2021-4053 Chromium: CVE-2021-4053 Use after free in UI8.8 0.0128 None reported
High CVE-2021-4065 Chromium: CVE-2021-4065 Use after free in autofill8.8 0.0128 None reported
High CVE-2021-4067 Chromium: CVE-2021-4067 Use after free in window manager8.8 0.0128 None reported
High CVE-2022-0103 Chromium: CVE-2022-0103 Use after free in SwiftShader8.8 0.0121 None reported
Showing 1 to 25 of 66 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.