CVE-2018-6095
chromium-browser: Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a...
CVE-2018-6095 is fixed in 5 products on 1 platform, first by chromium-browser 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0158
75th percentile
Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-browser 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-browser-l10n 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-chromedriver 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-codecs-ffmpeg 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |