{
  "fix": "chromium-browser 72.0.3626.119-0ubuntu0.18.04.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-72.0.3626.119-0ubuntu0.18.04.1",
  "summary": "chromium-browser 72.0.3626.119-0ubuntu0.18.04.1, released January 2, 2023, fixes 31 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-browser 72.0.3626.119-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2023-01-02T15:15:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2019-13768, high severity",
  "supported": false,
  "cveCount": 31,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.13355,
  "maxCvss": 7.4,
  "appliesTo": [
    {
      "product": "chromium-browser",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-browser",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "72.0.3626.119-0ubuntu0.18.04.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2019-13768",
      "url": "https://patchblox.com/security/cve/CVE-2019-13768",
      "title": "chromium-browser: Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a s...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.4,
      "epss": 0.00942,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5782",
      "url": "https://patchblox.com/security/cve/CVE-2019-5782",
      "title": "chromium-browser: Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.13355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5770",
      "url": "https://patchblox.com/security/cve/CVE-2019-5770",
      "title": "chromium-browser: Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5756",
      "url": "https://patchblox.com/security/cve/CVE-2019-5756",
      "title": "chromium-browser: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attack...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02824,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5762",
      "url": "https://patchblox.com/security/cve/CVE-2019-5762",
      "title": "chromium-browser: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attack...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02824,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5779",
      "url": "https://patchblox.com/security/cve/CVE-2019-5779",
      "title": "chromium-browser: Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to b...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02586,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5755",
      "url": "https://patchblox.com/security/cve/CVE-2019-5755",
      "title": "chromium-browser: Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01905,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5773",
      "url": "https://patchblox.com/security/cve/CVE-2019-5773",
      "title": "chromium-browser: Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01824,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5757",
      "url": "https://patchblox.com/security/cve/CVE-2019-5757",
      "title": "chromium-browser: An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potent...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01794,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5772",
      "url": "https://patchblox.com/security/cve/CVE-2019-5772",
      "title": "chromium-browser: Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remo...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5758",
      "url": "https://patchblox.com/security/cve/CVE-2019-5758",
      "title": "chromium-browser: Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to po...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01666,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5766",
      "url": "https://patchblox.com/security/cve/CVE-2019-5766",
      "title": "chromium-browser: Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacke...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01632,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5763",
      "url": "https://patchblox.com/security/cve/CVE-2019-5763",
      "title": "chromium-browser: Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potential...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01626,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5769",
      "url": "https://patchblox.com/security/cve/CVE-2019-5769",
      "title": "chromium-browser: Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.362...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5784",
      "url": "https://patchblox.com/security/cve/CVE-2019-5784",
      "title": "chromium-browser: Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01551,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5774",
      "url": "https://patchblox.com/security/cve/CVE-2019-5774",
      "title": "chromium-browser: Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5775",
      "url": "https://patchblox.com/security/cve/CVE-2019-5775",
      "title": "chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5776",
      "url": "https://patchblox.com/security/cve/CVE-2019-5776",
      "title": "chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5777",
      "url": "https://patchblox.com/security/cve/CVE-2019-5777",
      "title": "chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5781",
      "url": "https://patchblox.com/security/cve/CVE-2019-5781",
      "title": "chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5759",
      "url": "https://patchblox.com/security/cve/CVE-2019-5759",
      "title": "chromium-browser: Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5760",
      "url": "https://patchblox.com/security/cve/CVE-2019-5760",
      "title": "chromium-browser: Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5764",
      "url": "https://patchblox.com/security/cve/CVE-2019-5764",
      "title": "chromium-browser: Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentiall...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5767",
      "url": "https://patchblox.com/security/cve/CVE-2019-5767",
      "title": "chromium-browser: Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an atta...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01338,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5768",
      "url": "https://patchblox.com/security/cve/CVE-2019-5768",
      "title": "chromium-browser: DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5783",
      "url": "https://patchblox.com/security/cve/CVE-2019-5783",
      "title": "chromium-browser: Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5778",
      "url": "https://patchblox.com/security/cve/CVE-2019-5778",
      "title": "chromium-browser: A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-13684",
      "url": "https://patchblox.com/security/cve/CVE-2019-13684",
      "title": "chromium-browser: Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak c...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00965,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5754",
      "url": "https://patchblox.com/security/cve/CVE-2019-5754",
      "title": "chromium-browser: Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5765",
      "url": "https://patchblox.com/security/cve/CVE-2019-5765",
      "title": "chromium-browser: An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attack...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00567,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-5780",
      "url": "https://patchblox.com/security/cve/CVE-2019-5780",
      "title": "chromium-browser: Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allow...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00336,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T14:02:24Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}