{
  "fix": "chromium-codecs-ffmpeg 89.0.4389.82-0ubuntu0.18.04.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-89.0.4389.82-0ubuntu0.18.04.1",
  "summary": "chromium-codecs-ffmpeg 89.0.4389.82-0ubuntu0.18.04.1, released January 2, 2023, fixes 96 CVEs in chromium-codecs-ffmpeg. 4 of them are being exploited (CVE-2021-21166); 4 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-codecs-ffmpeg 89.0.4389.82-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2023-01-02T15:15:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2021-21166, exploited (CISA KEV)",
  "supported": false,
  "cveCount": 96,
  "exploitedCveCount": 4,
  "kevCveCount": 4,
  "ransomwareCveCount": 0,
  "maxEpss": 0.99595,
  "maxCvss": 6.8,
  "appliesTo": [
    {
      "product": "chromium-codecs-ffmpeg",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-codecs-ffmpeg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "89.0.4389.82-0ubuntu0.18.04.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2021-21166",
      "url": "https://patchblox.com/security/cve/CVE-2021-21166",
      "title": "Chromium CVE-2021-21166:  Object lifecycle issue in audio",
      "priority": "Patch now",
      "severity": "Medium",
      "epss": 0.24027,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21148",
      "url": "https://patchblox.com/security/cve/CVE-2021-21148",
      "title": "Chromium CVE-2021-21148: Heap buffer overflow in V8",
      "priority": "Patch now",
      "severity": "Medium",
      "epss": 0.19968,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6572",
      "url": "https://patchblox.com/security/cve/CVE-2020-6572",
      "title": "chromium-browser: Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code vi...",
      "priority": "Patch now",
      "severity": "Medium",
      "epss": 0.10586,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21193",
      "url": "https://patchblox.com/security/cve/CVE-2021-21193",
      "title": "Chromium CVE-2021-21193: Use after free in Blink",
      "priority": "Patch now",
      "severity": "Medium",
      "epss": 0.0995,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16040",
      "url": "https://patchblox.com/security/cve/CVE-2020-16040",
      "title": "chromium-browser: Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially ex...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.99595,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21132",
      "url": "https://patchblox.com/security/cve/CVE-2021-21132",
      "title": "Chromium CVE-2021-21132: Inappropriate implementation in DevTools",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.25108,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21135",
      "url": "https://patchblox.com/security/cve/CVE-2021-21135",
      "title": "Chromium CVE-2021-21135: Inappropriate implementation in Performance API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.20662,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21118",
      "url": "https://patchblox.com/security/cve/CVE-2021-21118",
      "title": "Chromium: CVE-2021-21118 Insufficient data validation in V8",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.18036,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21177",
      "url": "https://patchblox.com/security/cve/CVE-2021-21177",
      "title": "Chromium CVE-2021-21177:  Insufficient policy enforcement in Autofill",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.17289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21123",
      "url": "https://patchblox.com/security/cve/CVE-2021-21123",
      "title": "Chromium CVE-2021-21123: Insufficient data validation in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.1091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21157",
      "url": "https://patchblox.com/security/cve/CVE-2021-21157",
      "title": "Chromium CVE-2021-21157: Use after free in Web Sockets",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.09458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21126",
      "url": "https://patchblox.com/security/cve/CVE-2021-21126",
      "title": "Chromium CVE-2021-21126: Insufficient policy enforcement in extensions",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.09409,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21125",
      "url": "https://patchblox.com/security/cve/CVE-2021-21125",
      "title": "Chromium CVE-2021-21125: Insufficient policy enforcement in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.08718,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21124",
      "url": "https://patchblox.com/security/cve/CVE-2021-21124",
      "title": "Chromium CVE-2021-21124: Potential user after free in Speech Recognizer",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.08468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21131",
      "url": "https://patchblox.com/security/cve/CVE-2021-21131",
      "title": "Chromium CVE-2021-21131: Insufficient policy enforcement in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.08247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21122",
      "url": "https://patchblox.com/security/cve/CVE-2021-21122",
      "title": "Chromium CVE-2021-21122: Use after free in Blink",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.07562,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21120",
      "url": "https://patchblox.com/security/cve/CVE-2021-21120",
      "title": "Chromium CVE-2021-21120: Use after free in WebSQL",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0742,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21119",
      "url": "https://patchblox.com/security/cve/CVE-2021-21119",
      "title": "Chromium CVE-2021-21119: Use after free in Media",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.07363,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21128",
      "url": "https://patchblox.com/security/cve/CVE-2021-21128",
      "title": "Chromium CVE-2021-21128: Heap buffer overflow in Blink",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.07019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21121",
      "url": "https://patchblox.com/security/cve/CVE-2021-21121",
      "title": "Chromium CVE-2021-21121: Use after free in Omnibox",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.06678,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21137",
      "url": "https://patchblox.com/security/cve/CVE-2021-21137",
      "title": "Chromium CVE-2021-21137: Inappropriate implementation in DevTools",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.06387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21127",
      "url": "https://patchblox.com/security/cve/CVE-2021-21127",
      "title": "Chromium CVE-2021-21127: Insufficient policy enforcement in extensions",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.06343,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21129",
      "url": "https://patchblox.com/security/cve/CVE-2021-21129",
      "title": "Chromium CVE-2021-21129: Insufficient policy enforcement in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.05875,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21130",
      "url": "https://patchblox.com/security/cve/CVE-2021-21130",
      "title": "Chromium CVE-2021-21130: Insufficient policy enforcement in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.05875,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21141",
      "url": "https://patchblox.com/security/cve/CVE-2021-21141",
      "title": "Chromium CVE-2021-21141: Insufficient policy enforcement in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.05869,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21134",
      "url": "https://patchblox.com/security/cve/CVE-2021-21134",
      "title": "Chromium CVE-2021-21134: Incorrect security UI in Page Info",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.05435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21139",
      "url": "https://patchblox.com/security/cve/CVE-2021-21139",
      "title": "Chromium CVE-2021-21139: Inappropriate implementation in iframe sandbox",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21136",
      "url": "https://patchblox.com/security/cve/CVE-2021-21136",
      "title": "Chromium CVE-2021-21136: Insufficient policy enforcement in WebView",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.04507,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21133",
      "url": "https://patchblox.com/security/cve/CVE-2021-21133",
      "title": "Chromium CVE-2021-21133: Insufficient policy enforcement in Downloads",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21110",
      "url": "https://patchblox.com/security/cve/CVE-2021-21110",
      "title": "chromium-chromedriver: Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perf...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21156",
      "url": "https://patchblox.com/security/cve/CVE-2021-21156",
      "title": "Chromium CVE-2021-21156: Heap buffer overflow in V8",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02703,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21106",
      "url": "https://patchblox.com/security/cve/CVE-2021-21106",
      "title": "chromium-codecs-ffmpeg: Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16041",
      "url": "https://patchblox.com/security/cve/CVE-2020-16041",
      "title": "chromium-browser: Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21160",
      "url": "https://patchblox.com/security/cve/CVE-2021-21160",
      "title": "Chromium CVE-2021-21160: Heap buffer overflow in WebAudio",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21182",
      "url": "https://patchblox.com/security/cve/CVE-2021-21182",
      "title": "Chromium CVE-2021-21182:  Insufficient policy enforcement in navigations",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01874,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21168",
      "url": "https://patchblox.com/security/cve/CVE-2021-21168",
      "title": "Chromium CVE-2021-21168:  Insufficient policy enforcement in appcache",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21159",
      "url": "https://patchblox.com/security/cve/CVE-2021-21159",
      "title": "Chromium CVE-2021-21159: Heap buffer overflow in TabStrip",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01726,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21176",
      "url": "https://patchblox.com/security/cve/CVE-2021-21176",
      "title": "Chromium CVE-2021-21176:  Inappropriate implementation in full screen mode",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01705,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21171",
      "url": "https://patchblox.com/security/cve/CVE-2021-21171",
      "title": "Chromium CVE-2021-21171:  Incorrect security UI in TabStrip and Navigation",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21172",
      "url": "https://patchblox.com/security/cve/CVE-2021-21172",
      "title": "Chromium CVE-2021-21172:  Insufficient policy enforcement in File System API",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21188",
      "url": "https://patchblox.com/security/cve/CVE-2021-21188",
      "title": "Chromium CVE-2021-21188:  Use after free in Blink",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21180",
      "url": "https://patchblox.com/security/cve/CVE-2021-21180",
      "title": "Chromium CVE-2021-21180:  Use after free in tab search",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01623,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21178",
      "url": "https://patchblox.com/security/cve/CVE-2021-21178",
      "title": "Chromium CVE-2021-21178 :  Inappropriate implementation in Compositing",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01615,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21173",
      "url": "https://patchblox.com/security/cve/CVE-2021-21173",
      "title": "Chromium CVE-2021-21173:  Side-channel information leakage in Network Internals",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01603,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21181",
      "url": "https://patchblox.com/security/cve/CVE-2021-21181",
      "title": "Chromium CVE-2021-21181:  Side-channel information leakage in autofill",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01603,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21170",
      "url": "https://patchblox.com/security/cve/CVE-2021-21170",
      "title": "Chromium CVE-2021-21170:  Incorrect security UI in Loader",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01599,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21161",
      "url": "https://patchblox.com/security/cve/CVE-2021-21161",
      "title": "Chromium CVE-2021-21161: Heap buffer overflow in TabStrip",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01538,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21174",
      "url": "https://patchblox.com/security/cve/CVE-2021-21174",
      "title": "Chromium CVE-2021-21174:  Inappropriate implementation in Referrer",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21190",
      "url": "https://patchblox.com/security/cve/CVE-2021-21190",
      "title": "Chromium CVE-2021-21190 :  Uninitialized Use in PDFium",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21113",
      "url": "https://patchblox.com/security/cve/CVE-2021-21113",
      "title": "chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21192",
      "url": "https://patchblox.com/security/cve/CVE-2021-21192",
      "title": "Chromium CVE-2021-21192: Heap buffer overflow in tab groups",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01475,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21149",
      "url": "https://patchblox.com/security/cve/CVE-2021-21149",
      "title": "Chromium CVE-2021-21149: Stack overflow in Data Transfer",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21189",
      "url": "https://patchblox.com/security/cve/CVE-2021-21189",
      "title": "Chromium CVE-2021-21189:  Insufficient policy enforcement in payments",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21116",
      "url": "https://patchblox.com/security/cve/CVE-2021-21116",
      "title": "chromium-browser: Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploi...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01452,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21187",
      "url": "https://patchblox.com/security/cve/CVE-2021-21187",
      "title": "Chromium CVE-2021-21187:  Insufficient data validation in URL formatting",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21154",
      "url": "https://patchblox.com/security/cve/CVE-2021-21154",
      "title": "Chromium: CVE-2021-21154 Heap buffer overflow in Tab Strip",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21169",
      "url": "https://patchblox.com/security/cve/CVE-2021-21169",
      "title": "Chromium CVE-2021-21169:  Out of bounds memory access in V8",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21179",
      "url": "https://patchblox.com/security/cve/CVE-2021-21179",
      "title": "Chromium CVE-2021-21179:  Use after free in Network Internals",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21115",
      "url": "https://patchblox.com/security/cve/CVE-2021-21115",
      "title": "chromium-browser: User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromise...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01409,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21162",
      "url": "https://patchblox.com/security/cve/CVE-2021-21162",
      "title": "Chromium CVE-2021-21162: Use after free in WebRTC",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21167",
      "url": "https://patchblox.com/security/cve/CVE-2021-21167",
      "title": "Chromium CVE-2021-21167:  Use after free in bookmarks",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21191",
      "url": "https://patchblox.com/security/cve/CVE-2021-21191",
      "title": "Chromium CVE-2021-21191: Use after free in WebRTC",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01374,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21114",
      "url": "https://patchblox.com/security/cve/CVE-2021-21114",
      "title": "chromium-codecs-ffmpeg-extra: Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21112",
      "url": "https://patchblox.com/security/cve/CVE-2021-21112",
      "title": "chromium-browser: Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21108",
      "url": "https://patchblox.com/security/cve/CVE-2021-21108",
      "title": "chromium-browser: Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the ren...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01333,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21109",
      "url": "https://patchblox.com/security/cve/CVE-2021-21109",
      "title": "chromium-browser: Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01333,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21155",
      "url": "https://patchblox.com/security/cve/CVE-2021-21155",
      "title": "Chromium CVE-2021-21155: Heap buffer overflow in Tab Strip",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21185",
      "url": "https://patchblox.com/security/cve/CVE-2021-21185",
      "title": "Chromium CVE-2021-21185:  Insufficient policy enforcement in extensions",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01286,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21152",
      "url": "https://patchblox.com/security/cve/CVE-2021-21152",
      "title": "Chromium: CVE-2021-21152 Heap buffer overflow in Media",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21153",
      "url": "https://patchblox.com/security/cve/CVE-2021-21153",
      "title": "Chromium: CVE-2021-21153 Stack overflow in GPU Process",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16037",
      "url": "https://patchblox.com/security/cve/CVE-2020-16037",
      "title": "chromium-browser: Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit h...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16038",
      "url": "https://patchblox.com/security/cve/CVE-2020-16038",
      "title": "chromium-browser: Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially explo...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16039",
      "url": "https://patchblox.com/security/cve/CVE-2020-16039",
      "title": "chromium-browser: Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21175",
      "url": "https://patchblox.com/security/cve/CVE-2021-21175",
      "title": "Chromium CVE-2021-21175:  Inappropriate implementation in Site isolation",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21150",
      "url": "https://patchblox.com/security/cve/CVE-2021-21150",
      "title": "Chromium: CVE-2021-21150 Use after free in Downloads",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21146",
      "url": "https://patchblox.com/security/cve/CVE-2021-21146",
      "title": "Chromium CVE-2021-21146: Use after free in Navigation",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21151",
      "url": "https://patchblox.com/security/cve/CVE-2021-21151",
      "title": "Chromium: CVE-2021-21151 Use after free in Payments",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21107",
      "url": "https://patchblox.com/security/cve/CVE-2021-21107",
      "title": "chromium-browser: Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had co...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21186",
      "url": "https://patchblox.com/security/cve/CVE-2021-21186",
      "title": "Chromium CVE-2021-21186:  Insufficient policy enforcement in QR scanning",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21142",
      "url": "https://patchblox.com/security/cve/CVE-2021-21142",
      "title": "Chromium CVE-2021-21142: Use after free in Payments",
      "priority": "Routine",
      "severity": "Negligible",
      "epss": 0.01121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21165",
      "url": "https://patchblox.com/security/cve/CVE-2021-21165",
      "title": "Chromium CVE-2021-21165:  Object lifecycle issue in audio",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16042",
      "url": "https://patchblox.com/security/cve/CVE-2020-16042",
      "title": "firefox: ELSA-2020-5562-1: firefox security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16043",
      "url": "https://patchblox.com/security/cve/CVE-2020-16043",
      "title": "chromium-browser: Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypas...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21111",
      "url": "https://patchblox.com/security/cve/CVE-2021-21111",
      "title": "chromium-browser: Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01078,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21145",
      "url": "https://patchblox.com/security/cve/CVE-2021-21145",
      "title": "Chromium CVE-2021-21145: Use after free in Fonts",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01052,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21183",
      "url": "https://patchblox.com/security/cve/CVE-2021-21183",
      "title": "Chromium CVE-2021-21183:  Inappropriate implementation in performance APIs",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21184",
      "url": "https://patchblox.com/security/cve/CVE-2021-21184",
      "title": "Chromium CVE-2021-21184: Inappropriate implementation in performance APIs",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21163",
      "url": "https://patchblox.com/security/cve/CVE-2021-21163",
      "title": "Chromium CVE-2021-21163:  Insufficient data validation in Reader Mode",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21144",
      "url": "https://patchblox.com/security/cve/CVE-2021-21144",
      "title": "Chromium CVE-2021-21144: Heap buffer overflow in Tab Groups",
      "priority": "Routine",
      "severity": "Negligible",
      "epss": 0.00884,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21147",
      "url": "https://patchblox.com/security/cve/CVE-2021-21147",
      "title": "Chromium CVE-2021-21147: Inappropriate implementation in Skia",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00856,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21143",
      "url": "https://patchblox.com/security/cve/CVE-2021-21143",
      "title": "Chromium CVE-2021-21143: Heap buffer overflow in Extensions",
      "priority": "Routine",
      "severity": "Negligible",
      "epss": 0.0083,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21164",
      "url": "https://patchblox.com/security/cve/CVE-2021-21164",
      "title": "Chromium CVE-2021-21164:  Insufficient data validation in Chrome for iOS",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00814,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21140",
      "url": "https://patchblox.com/security/cve/CVE-2021-21140",
      "title": "Chromium CVE-2021-21140: Uninitialized Use in USB",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.8,
      "epss": 0.00773,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21138",
      "url": "https://patchblox.com/security/cve/CVE-2021-21138",
      "title": "chromium-browser: Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a s...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00517,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21200",
      "url": "https://patchblox.com/security/cve/CVE-2021-21200",
      "title": "chromium: Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an o...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.4,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-21117",
      "url": "https://patchblox.com/security/cve/CVE-2021-21117",
      "title": "chromium-browser: Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perf...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T14:02:24Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}