Linux · Ubuntu · Package update · June 27, 2019

chromium-browser 66.0.3359.139-0ubuntu0.18.04.3: chromium-browser 66.0.3359.139-0ubuntu0.18.04.3 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019, fixes 34 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
34
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0919
95th percentile

Priority of the 34 CVEs

Patch now 0 Urgent 0 High 0 Routine 34

Fixed package versions

ProductReleaseFixed in
chromium-browserUbuntu 18.04.6 LTS (bionic)66.0.3359.139-0ubuntu0.18.04.3

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2018-6092 chromium-browser: An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacke...n/a 0.0919 None reported
Routine CVE-2018-6085 chromium-browser: Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker t...n/a 0.0356 None reported
Routine CVE-2018-6087 chromium-browser: A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrar...n/a 0.0345 None reported
Routine CVE-2018-6086 chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrom...n/a 0.0335 None reported
Routine CVE-2018-6090 chromium-browser: An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a rem...n/a 0.0327 None reported
Routine CVE-2018-6101 chromium-browser: A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute ar...n/a 0.0266 None reported
Routine CVE-2018-6111 chromium-browser: An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a loc...n/a 0.0258 None reported
Routine CVE-2018-6088 chromium-browser: An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute a...n/a 0.0242 None reported
Routine CVE-2018-6091 chromium-browser: Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrom...n/a 0.0214 None reported
Routine CVE-2018-6117 chromium-browser: Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentiall...n/a 0.0191 None reported
Routine CVE-2018-6118 chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0....n/a 0.0191 None reported
Routine CVE-2018-6106 chromium-browser: An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remo...n/a 0.0172 None reported
Routine CVE-2018-6094 chromium-browser: Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially...n/a 0.0162 None reported
Routine CVE-2018-6089 chromium-browser: A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome pr...n/a 0.0160 None reported
Routine CVE-2018-6093 chromium-browser: Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-o...n/a 0.0160 None reported
Routine CVE-2018-6099 chromium-browser: A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cros...n/a 0.0160 None reported
Routine CVE-2018-6095 chromium-browser: Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a...n/a 0.0158 None reported
Routine CVE-2018-6112 chromium-browser: Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a re...n/a 0.0156 None reported
Routine CVE-2018-6103 chromium-browser: A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass p...n/a 0.0149 None reported
Routine CVE-2018-6096 chromium-browser: A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.33...n/a 0.0149 None reported
Routine CVE-2018-6108 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...n/a 0.0145 None reported
Routine CVE-2018-6114 chromium-browser: Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remot...n/a 0.0144 None reported
Routine CVE-2018-6097 chromium-browser: Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a r...n/a 0.0143 None reported
Routine CVE-2018-6113 chromium-browser: Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed...n/a 0.0143 None reported
Routine CVE-2018-6098 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...n/a 0.0142 None reported
Showing 1 to 25 of 34 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.