Linux · 
Ubuntu · Package update · August 28, 2018
Ubuntu · Package update · August 28, 2018chromium-browser 63.0.3239.84-0ubuntu1: chromium-browser 63.0.3239.84-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)
chromium-browser 63.0.3239.84-0ubuntu1, released August 28, 2018, fixes 20 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
20
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0294
87th percentile
Priority of the 20 CVEs
Patch now 0
Urgent 0
High 0
Routine 20
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-browser | Ubuntu 18.04.6 LTS (bionic) | 63.0.3239.84-0ubuntu1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Routine | CVE-2017-15412 | chromium-browser: Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a... | n/a | 0.0294 | None reported |
| Routine | CVE-2017-15422 | chromium-browser: Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1,... | n/a | 0.0254 | None reported |
| Routine | CVE-2017-15407 | chromium-browser: Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to... | n/a | 0.0243 | None reported |
| Routine | CVE-2017-15415 | chromium-browser: Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of... | n/a | 0.0174 | None reported |
| Routine | CVE-2017-15413 | chromium-browser: Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially e... | n/a | 0.0166 | None reported |
| Routine | CVE-2017-15418 | chromium-browser: Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potent... | n/a | 0.0163 | None reported |
| Routine | CVE-2017-15409 | chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit... | n/a | 0.0163 | None reported |
| Routine | CVE-2017-15410 | chromium-browser: Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap... | n/a | 0.0158 | None reported |
| Routine | CVE-2017-15411 | chromium-browser: Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap... | n/a | 0.0158 | None reported |
| Routine | CVE-2017-15408 | chromium-browser: Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially explo... | n/a | 0.0154 | None reported |
| Routine | CVE-2017-15420 | chromium-browser: Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a... | n/a | 0.0154 | None reported |
| Routine | CVE-2017-15423 | chromium-browser: Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to... | n/a | 0.0151 | None reported |
| Routine | CVE-2017-15417 | chromium-browser: Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a rem... | n/a | 0.0151 | None reported |
| Routine | CVE-2017-15416 | chromium-browser: Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially expl... | n/a | 0.0151 | None reported |
| Routine | CVE-2017-15419 | chromium-browser: Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attack... | n/a | 0.0129 | None reported |
| Routine | CVE-2017-15424 | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perfor... | n/a | 0.0119 | None reported |
| Routine | CVE-2017-15425 | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perfor... | n/a | 0.0116 | None reported |
| Routine | CVE-2017-15426 | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perfor... | n/a | 0.0116 | None reported |
| Routine | CVE-2017-15427 | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user... | n/a | 0.0086 | None reported |
| Routine | CVE-2017-15430 | chromium-browser: Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to... | n/a | 0.0052 | None reported |
Showing 1 to 20 of 20
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.