{
  "fix": "chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-66.0.3359.139-0ubuntu0.18.04.3",
  "summary": "chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019, fixes 34 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2019-06-27T10:15:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 34 CVEs, none high severity",
  "supported": false,
  "cveCount": 34,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.09186,
  "appliesTo": [
    {
      "product": "chromium-codecs-ffmpeg-extra",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-codecs-ffmpeg-extra",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "66.0.3359.139-0ubuntu0.18.04.3",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-6092",
      "url": "https://patchblox.com/security/cve/CVE-2018-6092",
      "title": "chromium-browser: An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacke...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.09186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6085",
      "url": "https://patchblox.com/security/cve/CVE-2018-6085",
      "title": "chromium-browser: Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker t...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6087",
      "url": "https://patchblox.com/security/cve/CVE-2018-6087",
      "title": "chromium-browser: A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrar...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03453,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6086",
      "url": "https://patchblox.com/security/cve/CVE-2018-6086",
      "title": "chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrom...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03348,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6090",
      "url": "https://patchblox.com/security/cve/CVE-2018-6090",
      "title": "chromium-browser: An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a rem...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6101",
      "url": "https://patchblox.com/security/cve/CVE-2018-6101",
      "title": "chromium-browser: A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute ar...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02658,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6111",
      "url": "https://patchblox.com/security/cve/CVE-2018-6111",
      "title": "chromium-browser: An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a loc...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6088",
      "url": "https://patchblox.com/security/cve/CVE-2018-6088",
      "title": "chromium-browser: An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6091",
      "url": "https://patchblox.com/security/cve/CVE-2018-6091",
      "title": "chromium-browser: Service Workers can intercept any request made by an \u0026lt;embed\u0026gt; or \u0026lt;object\u0026gt; tag in Fetch API in Google Chrom...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6117",
      "url": "https://patchblox.com/security/cve/CVE-2018-6117",
      "title": "chromium-browser: Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentiall...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01912,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6118",
      "url": "https://patchblox.com/security/cve/CVE-2018-6118",
      "title": "chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0....",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6106",
      "url": "https://patchblox.com/security/cve/CVE-2018-6106",
      "title": "chromium-browser: An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remo...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6094",
      "url": "https://patchblox.com/security/cve/CVE-2018-6094",
      "title": "chromium-browser: Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01617,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6089",
      "url": "https://patchblox.com/security/cve/CVE-2018-6089",
      "title": "chromium-browser: A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome pr...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6093",
      "url": "https://patchblox.com/security/cve/CVE-2018-6093",
      "title": "chromium-browser: Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-o...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6099",
      "url": "https://patchblox.com/security/cve/CVE-2018-6099",
      "title": "chromium-browser: A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cros...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6095",
      "url": "https://patchblox.com/security/cve/CVE-2018-6095",
      "title": "chromium-browser: Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6112",
      "url": "https://patchblox.com/security/cve/CVE-2018-6112",
      "title": "chromium-browser: Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a re...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01558,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6103",
      "url": "https://patchblox.com/security/cve/CVE-2018-6103",
      "title": "chromium-browser: A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass p...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01494,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6096",
      "url": "https://patchblox.com/security/cve/CVE-2018-6096",
      "title": "chromium-browser: A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.33...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6108",
      "url": "https://patchblox.com/security/cve/CVE-2018-6108",
      "title": "chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01446,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6114",
      "url": "https://patchblox.com/security/cve/CVE-2018-6114",
      "title": "chromium-browser: Incorrect enforcement of CSP for \u0026lt;object\u0026gt; tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remot...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6097",
      "url": "https://patchblox.com/security/cve/CVE-2018-6097",
      "title": "chromium-browser: Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a r...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6113",
      "url": "https://patchblox.com/security/cve/CVE-2018-6113",
      "title": "chromium-browser: Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6098",
      "url": "https://patchblox.com/security/cve/CVE-2018-6098",
      "title": "chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6109",
      "url": "https://patchblox.com/security/cve/CVE-2018-6109",
      "title": "chromium-browser: readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6116",
      "url": "https://patchblox.com/security/cve/CVE-2018-6116",
      "title": "chromium-browser: A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6100",
      "url": "https://patchblox.com/security/cve/CVE-2018-6100",
      "title": "chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6104",
      "url": "https://patchblox.com/security/cve/CVE-2018-6104",
      "title": "chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6107",
      "url": "https://patchblox.com/security/cve/CVE-2018-6107",
      "title": "chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6110",
      "url": "https://patchblox.com/security/cve/CVE-2018-6110",
      "title": "chromium-browser: Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chr...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6105",
      "url": "https://patchblox.com/security/cve/CVE-2018-6105",
      "title": "chromium-browser: Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attac...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6102",
      "url": "https://patchblox.com/security/cve/CVE-2018-6102",
      "title": "chromium-browser: Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attack...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6115",
      "url": "https://patchblox.com/security/cve/CVE-2018-6115",
      "title": "chromium-browser: Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allow...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T14:02:24Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}