# chromium-browser 64.0.3282.119-0ubuntu1: chromium-browser 64.0.3282.119-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 64.0.3282.119-0ubuntu1, released September 25, 2018, fixes 25 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-64.0.3282.119-0ubuntu1
- Platform: Linux
- Released: Sep 25, 2018
- Priority: Routine (Closes 25 CVEs, none high severity)
- CVEs: 25, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-6031](https://patchblox.com/security/data/cve/CVE-2018-6031.md) | Routine | chromium-browser: Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit hea... | n/a | 0.0215 |  |
| [CVE-2018-6034](https://patchblox.com/security/data/cve/CVE-2018-6034.md) | Routine | chromium-browser: Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an... | n/a | 0.0191 |  |
| [CVE-2018-6043](https://patchblox.com/security/data/cve/CVE-2018-6043.md) | Routine | chromium-browser: Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote at... | n/a | 0.0174 |  |
| [CVE-2018-6036](https://patchblox.com/security/data/cve/CVE-2018-6036.md) | Routine | chromium-browser: Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially l... | n/a | 0.0162 |  |
| [CVE-2018-6037](https://patchblox.com/security/data/cve/CVE-2018-6037.md) | Routine | chromium-browser: Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain... | n/a | 0.0160 |  |
| [CVE-2018-6038](https://patchblox.com/security/data/cve/CVE-2018-6038.md) | Routine | chromium-browser: Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of... | n/a | 0.0154 |  |
| [CVE-2018-6045](https://patchblox.com/security/data/cve/CVE-2018-6045.md) | Routine | chromium-browser: Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to pote... | n/a | 0.0154 |  |
| [CVE-2018-6035](https://patchblox.com/security/data/cve/CVE-2018-6035.md) | Routine | chromium-browser: Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to pote... | n/a | 0.0153 |  |
| [CVE-2018-6033](https://patchblox.com/security/data/cve/CVE-2018-6033.md) | Routine | chromium-browser: Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potent... | n/a | 0.0147 |  |
| [CVE-2018-6047](https://patchblox.com/security/data/cve/CVE-2018-6047.md) | Routine | chromium-browser: Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... | n/a | 0.0144 |  |
| [CVE-2018-6054](https://patchblox.com/security/data/cve/CVE-2018-6054.md) | Routine | chromium-browser: Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap... | n/a | 0.0143 |  |
| [CVE-2018-6049](https://patchblox.com/security/data/cve/CVE-2018-6049.md) | Routine | chromium-browser: Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoo... | n/a | 0.0143 |  |
| [CVE-2018-6032](https://patchblox.com/security/data/cve/CVE-2018-6032.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... | n/a | 0.0141 |  |
| [CVE-2018-6040](https://patchblox.com/security/data/cve/CVE-2018-6040.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... | n/a | 0.0140 |  |
| [CVE-2018-6052](https://patchblox.com/security/data/cve/CVE-2018-6052.md) | Routine | chromium-browser: Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed... | n/a | 0.0135 |  |
| [CVE-2018-6050](https://patchblox.com/security/data/cve/CVE-2018-6050.md) | Routine | chromium-browser: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte... | n/a | 0.0134 |  |
| [CVE-2018-6041](https://patchblox.com/security/data/cve/CVE-2018-6041.md) | Routine | chromium-browser: Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the co... | n/a | 0.0133 |  |
| [CVE-2018-6048](https://patchblox.com/security/data/cve/CVE-2018-6048.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... | n/a | 0.0127 |  |
| [CVE-2018-6051](https://patchblox.com/security/data/cve/CVE-2018-6051.md) | Routine | chromium-browser: XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the p... | n/a | 0.0127 |  |
| [CVE-2018-6042](https://patchblox.com/security/data/cve/CVE-2018-6042.md) | Routine | chromium-browser: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte... | n/a | 0.0123 |  |
| [CVE-2018-6039](https://patchblox.com/security/data/cve/CVE-2018-6039.md) | Routine | chromium-browser: Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... | n/a | 0.0118 |  |
| [CVE-2018-6046](https://patchblox.com/security/data/cve/CVE-2018-6046.md) | Routine | chromium-browser: Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... | n/a | 0.0118 |  |
| [CVE-2018-6055](https://patchblox.com/security/data/cve/CVE-2018-6055.md) | Routine | chromium-browser: Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker... | n/a | 0.0114 |  |
| [CVE-2018-6119](https://patchblox.com/security/data/cve/CVE-2018-6119.md) | Routine | chromium-browser: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte... | n/a | 0.0090 |  |
| [CVE-2018-6053](https://patchblox.com/security/data/cve/CVE-2018-6053.md) | Routine | chromium-browser: Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view... | n/a | 0.0074 |  |

---

Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
