# chromium-browser 78.0.3904.70-0ubuntu0.18.04.2: chromium-browser 78.0.3904.70-0ubuntu0.18.04.2 for Ubuntu 18.04.6 LTS (bionic) chromium-browser 78.0.3904.70-0ubuntu0.18.04.2, released November 25, 2019, fixes 26 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-78.0.3904.70-0ubuntu0.18.04.2 - Platform: Linux - Released: Nov 25, 2019 - Priority: High (Closes CVE-2019-15903, high severity) - CVEs: 26, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 78.0.3904.70-0ubuntu0.18.04.2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-15903](https://patchblox.com/security/data/cve/CVE-2019-15903.md) | High | Python 3.6 and 2 others: Out-of-bounds Read | 7.5 | 0.0664 | | | [CVE-2019-13693](https://patchblox.com/security/data/cve/CVE-2019-13693.md) | Routine | chromium-browser: Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the... | n/a | 0.0124 | | | [CVE-2019-13719](https://patchblox.com/security/data/cve/CVE-2019-13719.md) | Routine | chromium-browser: Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide se... | n/a | 0.0121 | | | [CVE-2019-13700](https://patchblox.com/security/data/cve/CVE-2019-13700.md) | Routine | chromium-browser: Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who h... | n/a | 0.0118 | | | [CVE-2019-13711](https://patchblox.com/security/data/cve/CVE-2019-13711.md) | Routine | chromium-browser: Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to lea... | n/a | 0.0118 | | | [CVE-2019-13713](https://patchblox.com/security/data/cve/CVE-2019-13713.md) | Routine | chromium-browser: Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to lea... | n/a | 0.0114 | | | [CVE-2019-13699](https://patchblox.com/security/data/cve/CVE-2019-13699.md) | Routine | chromium-browser: Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the rend... | n/a | 0.0109 | | | [CVE-2019-13717](https://patchblox.com/security/data/cve/CVE-2019-13717.md) | Routine | chromium-browser: Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide se... | n/a | 0.0104 | | | [CVE-2019-13709](https://patchblox.com/security/data/cve/CVE-2019-13709.md) | Routine | chromium-browser: Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypa... | n/a | 0.0099 | | | [CVE-2019-13695](https://patchblox.com/security/data/cve/CVE-2019-13695.md) | Routine | chromium-browser: Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially e... | n/a | 0.0097 | | | [CVE-2019-13710](https://patchblox.com/security/data/cve/CVE-2019-13710.md) | Routine | chromium-browser: Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attac... | n/a | 0.0096 | | | [CVE-2019-13704](https://patchblox.com/security/data/cve/CVE-2019-13704.md) | Routine | chromium-browser: Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to byp... | n/a | 0.0093 | | | [CVE-2019-13716](https://patchblox.com/security/data/cve/CVE-2019-13716.md) | Routine | chromium-browser: Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker t... | n/a | 0.0093 | | | [CVE-2019-13701](https://patchblox.com/security/data/cve/CVE-2019-13701.md) | Routine | chromium-browser: Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the... | n/a | 0.0092 | | | [CVE-2019-13703](https://patchblox.com/security/data/cve/CVE-2019-13703.md) | Routine | chromium-browser: Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote att... | n/a | 0.0092 | | | [CVE-2019-13708](https://patchblox.com/security/data/cve/CVE-2019-13708.md) | Routine | chromium-browser: Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to... | n/a | 0.0092 | | | [CVE-2019-13694](https://patchblox.com/security/data/cve/CVE-2019-13694.md) | Routine | chromium-browser: Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit hea... | n/a | 0.0091 | | | [CVE-2019-13718](https://patchblox.com/security/data/cve/CVE-2019-13718.md) | Routine | chromium-browser: Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform d... | n/a | 0.0088 | | | [CVE-2019-13715](https://patchblox.com/security/data/cve/CVE-2019-13715.md) | Routine | chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacke... | n/a | 0.0085 | | | [CVE-2019-13714](https://patchblox.com/security/data/cve/CVE-2019-13714.md) | Routine | chromium-browser: Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed... | n/a | 0.0083 | | | [CVE-2019-13696](https://patchblox.com/security/data/cve/CVE-2019-13696.md) | Routine | chromium-browser: Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit... | n/a | 0.0079 | | | [CVE-2019-13706](https://patchblox.com/security/data/cve/CVE-2019-13706.md) | Routine | chromium-browser: Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially... | n/a | 0.0077 | | | [CVE-2019-13697](https://patchblox.com/security/data/cve/CVE-2019-13697.md) | Routine | chromium-browser: Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker... | n/a | 0.0077 | | | [CVE-2019-13705](https://patchblox.com/security/data/cve/CVE-2019-13705.md) | Routine | chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convince... | n/a | 0.0058 | | | [CVE-2019-13702](https://patchblox.com/security/data/cve/CVE-2019-13702.md) | Routine | chromium-browser: Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker... | n/a | 0.0053 | | | [CVE-2019-13707](https://patchblox.com/security/data/cve/CVE-2019-13707.md) | Routine | chromium-browser: Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a loc... | n/a | 0.0045 | | --- Data as of 2026-11-13T14:02:24Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.