{
  "fix": "chromium-browser 64.0.3282.119-0ubuntu1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-64.0.3282.119-0ubuntu1",
  "summary": "chromium-browser 64.0.3282.119-0ubuntu1, released September 25, 2018, fixes 25 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-browser 64.0.3282.119-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2018-09-25T07:29:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 25 CVEs, none high severity",
  "supported": false,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02149,
  "appliesTo": [
    {
      "product": "chromium-browser",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-browser",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "64.0.3282.119-0ubuntu1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-6031",
      "url": "https://patchblox.com/security/cve/CVE-2018-6031",
      "title": "chromium-browser: Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit hea...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6034",
      "url": "https://patchblox.com/security/cve/CVE-2018-6034",
      "title": "chromium-browser: Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01908,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6043",
      "url": "https://patchblox.com/security/cve/CVE-2018-6043",
      "title": "chromium-browser: Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote at...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6036",
      "url": "https://patchblox.com/security/cve/CVE-2018-6036",
      "title": "chromium-browser: Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially l...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01615,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6037",
      "url": "https://patchblox.com/security/cve/CVE-2018-6037",
      "title": "chromium-browser: Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6038",
      "url": "https://patchblox.com/security/cve/CVE-2018-6038",
      "title": "chromium-browser: Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01539,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6045",
      "url": "https://patchblox.com/security/cve/CVE-2018-6045",
      "title": "chromium-browser: Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to pote...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01537,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6035",
      "url": "https://patchblox.com/security/cve/CVE-2018-6035",
      "title": "chromium-browser: Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to pote...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6033",
      "url": "https://patchblox.com/security/cve/CVE-2018-6033",
      "title": "chromium-browser: Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potent...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01474,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6047",
      "url": "https://patchblox.com/security/cve/CVE-2018-6047",
      "title": "chromium-browser: Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6054",
      "url": "https://patchblox.com/security/cve/CVE-2018-6054",
      "title": "chromium-browser: Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6049",
      "url": "https://patchblox.com/security/cve/CVE-2018-6049",
      "title": "chromium-browser: Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoo...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6032",
      "url": "https://patchblox.com/security/cve/CVE-2018-6032",
      "title": "chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6040",
      "url": "https://patchblox.com/security/cve/CVE-2018-6040",
      "title": "chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01401,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6052",
      "url": "https://patchblox.com/security/cve/CVE-2018-6052",
      "title": "chromium-browser: Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01349,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6050",
      "url": "https://patchblox.com/security/cve/CVE-2018-6050",
      "title": "chromium-browser: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01338,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6041",
      "url": "https://patchblox.com/security/cve/CVE-2018-6041",
      "title": "chromium-browser: Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the co...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01327,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6048",
      "url": "https://patchblox.com/security/cve/CVE-2018-6048",
      "title": "chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6051",
      "url": "https://patchblox.com/security/cve/CVE-2018-6051",
      "title": "chromium-browser: XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the p...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6042",
      "url": "https://patchblox.com/security/cve/CVE-2018-6042",
      "title": "chromium-browser: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6039",
      "url": "https://patchblox.com/security/cve/CVE-2018-6039",
      "title": "chromium-browser: Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6046",
      "url": "https://patchblox.com/security/cve/CVE-2018-6046",
      "title": "chromium-browser: Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6055",
      "url": "https://patchblox.com/security/cve/CVE-2018-6055",
      "title": "chromium-browser: Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6119",
      "url": "https://patchblox.com/security/cve/CVE-2018-6119",
      "title": "chromium-browser: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00899,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-6053",
      "url": "https://patchblox.com/security/cve/CVE-2018-6053",
      "title": "chromium-browser: Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.00741,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T07:53:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}