{
  "fix": "chromium-codecs-ffmpeg 80.0.3987.87-0ubuntu0.18.04.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-80.0.3987.87-0ubuntu0.18.04.1",
  "summary": "chromium-codecs-ffmpeg 80.0.3987.87-0ubuntu0.18.04.1, released June 3, 2020, fixes 37 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-codecs-ffmpeg 80.0.3987.87-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2020-06-03T16:15:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 37 CVEs, none high severity",
  "supported": false,
  "cveCount": 37,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03083,
  "maxCvss": 6.5,
  "appliesTo": [
    {
      "product": "chromium-codecs-ffmpeg",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-codecs-ffmpeg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "80.0.3987.87-0ubuntu0.18.04.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2020-6390",
      "url": "https://patchblox.com/security/cve/CVE-2020-6390",
      "title": "chromium-browser: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentiall...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03083,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6402",
      "url": "https://patchblox.com/security/cve/CVE-2020-6402",
      "title": "chromium-browser: Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who c...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02662,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6405",
      "url": "https://patchblox.com/security/cve/CVE-2020-6405",
      "title": "lemon: Fixed (#1804823)",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.5,
      "epss": 0.02625,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6385",
      "url": "https://patchblox.com/security/cve/CVE-2020-6385",
      "title": "chromium-browser: Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6382",
      "url": "https://patchblox.com/security/cve/CVE-2020-6382",
      "title": "chromium-browser: Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6381",
      "url": "https://patchblox.com/security/cve/CVE-2020-6381",
      "title": "chromium-browser: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attack...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6404",
      "url": "https://patchblox.com/security/cve/CVE-2020-6404",
      "title": "chromium-browser: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6388",
      "url": "https://patchblox.com/security/cve/CVE-2020-6388",
      "title": "chromium-browser: Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially expl...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6400",
      "url": "https://patchblox.com/security/cve/CVE-2020-6400",
      "title": "chromium-browser: Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-o...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6415",
      "url": "https://patchblox.com/security/cve/CVE-2020-6415",
      "title": "chromium-browser: Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potent...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6416",
      "url": "https://patchblox.com/security/cve/CVE-2020-6416",
      "title": "chromium-browser: Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potential...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6399",
      "url": "https://patchblox.com/security/cve/CVE-2020-6399",
      "title": "chromium-browser: Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01989,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6395",
      "url": "https://patchblox.com/security/cve/CVE-2020-6395",
      "title": "chromium-browser: Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potential...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01984,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6401",
      "url": "https://patchblox.com/security/cve/CVE-2020-6401",
      "title": "chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacke...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01945,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6397",
      "url": "https://patchblox.com/security/cve/CVE-2020-6397",
      "title": "chromium-browser: Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof sec...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01915,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6413",
      "url": "https://patchblox.com/security/cve/CVE-2020-6413",
      "title": "chromium-browser: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01908,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6414",
      "url": "https://patchblox.com/security/cve/CVE-2020-6414",
      "title": "chromium-browser: Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01857,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6393",
      "url": "https://patchblox.com/security/cve/CVE-2020-6393",
      "title": "chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cro...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01854,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6406",
      "url": "https://patchblox.com/security/cve/CVE-2020-6406",
      "title": "chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6387",
      "url": "https://patchblox.com/security/cve/CVE-2020-6387",
      "title": "chromium-browser: Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01806,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6398",
      "url": "https://patchblox.com/security/cve/CVE-2020-6398",
      "title": "chromium-browser: Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially e...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01794,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6389",
      "url": "https://patchblox.com/security/cve/CVE-2020-6389",
      "title": "chromium-browser: Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01742,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6409",
      "url": "https://patchblox.com/security/cve/CVE-2020-6409",
      "title": "chromium-browser: Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convince...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01742,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6396",
      "url": "https://patchblox.com/security/cve/CVE-2020-6396",
      "title": "chromium-browser: Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the co...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01738,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6410",
      "url": "https://patchblox.com/security/cve/CVE-2020-6410",
      "title": "chromium-browser: Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to con...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01696,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6394",
      "url": "https://patchblox.com/security/cve/CVE-2020-6394",
      "title": "chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass c...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6408",
      "url": "https://patchblox.com/security/cve/CVE-2020-6408",
      "title": "chromium-browser: Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain pot...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01624,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6403",
      "url": "https://patchblox.com/security/cve/CVE-2020-6403",
      "title": "chromium-browser: Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01606,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6412",
      "url": "https://patchblox.com/security/cve/CVE-2020-6412",
      "title": "chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacke...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6392",
      "url": "https://patchblox.com/security/cve/CVE-2020-6392",
      "title": "chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convince...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6411",
      "url": "https://patchblox.com/security/cve/CVE-2020-6411",
      "title": "chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacke...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01396,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6391",
      "url": "https://patchblox.com/security/cve/CVE-2020-6391",
      "title": "chromium-browser: Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker t...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6499",
      "url": "https://patchblox.com/security/cve/CVE-2020-6499",
      "title": "chromium-browser: Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass A...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00697,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6500",
      "url": "https://patchblox.com/security/cve/CVE-2020-6500",
      "title": "chromium-browser: Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spo...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00693,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6501",
      "url": "https://patchblox.com/security/cve/CVE-2020-6501",
      "title": "chromium-browser: Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass con...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00672,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6502",
      "url": "https://patchblox.com/security/cve/CVE-2020-6502",
      "title": "chromium-browser-l10n: Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof sec...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00667,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6417",
      "url": "https://patchblox.com/security/cve/CVE-2020-6417",
      "title": "chromium-browser: Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T08:00:37Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}