# chromium-browser 66.0.3359.139-0ubuntu0.18.04.3: chromium-browser 66.0.3359.139-0ubuntu0.18.04.3 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019, fixes 34 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-66.0.3359.139-0ubuntu0.18.04.3
- Platform: Linux
- Released: Jun 27, 2019
- Priority: Routine (Closes 34 CVEs, none high severity)
- CVEs: 34, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-browser](https://patchblox.com/security/data/product/linux/chromium-browser.md) | Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-6092](https://patchblox.com/security/data/cve/CVE-2018-6092.md) | Routine | chromium-browser: An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacke... | n/a | 0.0919 |  |
| [CVE-2018-6085](https://patchblox.com/security/data/cve/CVE-2018-6085.md) | Routine | chromium-browser: Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker t... | n/a | 0.0356 |  |
| [CVE-2018-6087](https://patchblox.com/security/data/cve/CVE-2018-6087.md) | Routine | chromium-browser: A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrar... | n/a | 0.0345 |  |
| [CVE-2018-6086](https://patchblox.com/security/data/cve/CVE-2018-6086.md) | Routine | chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrom... | n/a | 0.0335 |  |
| [CVE-2018-6090](https://patchblox.com/security/data/cve/CVE-2018-6090.md) | Routine | chromium-browser: An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a rem... | n/a | 0.0327 |  |
| [CVE-2018-6101](https://patchblox.com/security/data/cve/CVE-2018-6101.md) | Routine | chromium-browser: A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute ar... | n/a | 0.0266 |  |
| [CVE-2018-6111](https://patchblox.com/security/data/cve/CVE-2018-6111.md) | Routine | chromium-browser: An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a loc... | n/a | 0.0258 |  |
| [CVE-2018-6088](https://patchblox.com/security/data/cve/CVE-2018-6088.md) | Routine | chromium-browser: An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute a... | n/a | 0.0242 |  |
| [CVE-2018-6091](https://patchblox.com/security/data/cve/CVE-2018-6091.md) | Routine | chromium-browser: Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrom... | n/a | 0.0214 |  |
| [CVE-2018-6117](https://patchblox.com/security/data/cve/CVE-2018-6117.md) | Routine | chromium-browser: Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentiall... | n/a | 0.0191 |  |
| [CVE-2018-6118](https://patchblox.com/security/data/cve/CVE-2018-6118.md) | Routine | chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.... | n/a | 0.0191 |  |
| [CVE-2018-6106](https://patchblox.com/security/data/cve/CVE-2018-6106.md) | Routine | chromium-browser: An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remo... | n/a | 0.0172 |  |
| [CVE-2018-6094](https://patchblox.com/security/data/cve/CVE-2018-6094.md) | Routine | chromium-browser: Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially... | n/a | 0.0162 |  |
| [CVE-2018-6089](https://patchblox.com/security/data/cve/CVE-2018-6089.md) | Routine | chromium-browser: A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome pr... | n/a | 0.0160 |  |
| [CVE-2018-6093](https://patchblox.com/security/data/cve/CVE-2018-6093.md) | Routine | chromium-browser: Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-o... | n/a | 0.0160 |  |
| [CVE-2018-6099](https://patchblox.com/security/data/cve/CVE-2018-6099.md) | Routine | chromium-browser: A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cros... | n/a | 0.0160 |  |
| [CVE-2018-6095](https://patchblox.com/security/data/cve/CVE-2018-6095.md) | Routine | chromium-browser: Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a... | n/a | 0.0158 |  |
| [CVE-2018-6112](https://patchblox.com/security/data/cve/CVE-2018-6112.md) | Routine | chromium-browser: Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a re... | n/a | 0.0156 |  |
| [CVE-2018-6103](https://patchblox.com/security/data/cve/CVE-2018-6103.md) | Routine | chromium-browser: A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass p... | n/a | 0.0149 |  |
| [CVE-2018-6096](https://patchblox.com/security/data/cve/CVE-2018-6096.md) | Routine | chromium-browser: A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.33... | n/a | 0.0149 |  |
| [CVE-2018-6108](https://patchblox.com/security/data/cve/CVE-2018-6108.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote... | n/a | 0.0145 |  |
| [CVE-2018-6114](https://patchblox.com/security/data/cve/CVE-2018-6114.md) | Routine | chromium-browser: Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remot... | n/a | 0.0144 |  |
| [CVE-2018-6097](https://patchblox.com/security/data/cve/CVE-2018-6097.md) | Routine | chromium-browser: Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a r... | n/a | 0.0143 |  |
| [CVE-2018-6113](https://patchblox.com/security/data/cve/CVE-2018-6113.md) | Routine | chromium-browser: Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed... | n/a | 0.0143 |  |
| [CVE-2018-6098](https://patchblox.com/security/data/cve/CVE-2018-6098.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote... | n/a | 0.0142 |  |
| [CVE-2018-6109](https://patchblox.com/security/data/cve/CVE-2018-6109.md) | Routine | chromium-browser: readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked... | n/a | 0.0141 |  |
| [CVE-2018-6116](https://patchblox.com/security/data/cve/CVE-2018-6116.md) | Routine | chromium-browser: A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially... | n/a | 0.0140 |  |
| [CVE-2018-6100](https://patchblox.com/security/data/cve/CVE-2018-6100.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed... | n/a | 0.0139 |  |
| [CVE-2018-6104](https://patchblox.com/security/data/cve/CVE-2018-6104.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote... | n/a | 0.0139 |  |
| [CVE-2018-6107](https://patchblox.com/security/data/cve/CVE-2018-6107.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote... | n/a | 0.0139 |  |
| [CVE-2018-6110](https://patchblox.com/security/data/cve/CVE-2018-6110.md) | Routine | chromium-browser: Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chr... | n/a | 0.0125 |  |
| [CVE-2018-6105](https://patchblox.com/security/data/cve/CVE-2018-6105.md) | Routine | chromium-browser: Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attac... | n/a | 0.0124 |  |
| [CVE-2018-6102](https://patchblox.com/security/data/cve/CVE-2018-6102.md) | Routine | chromium-browser: Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attack... | n/a | 0.0121 |  |
| [CVE-2018-6115](https://patchblox.com/security/data/cve/CVE-2018-6115.md) | Routine | chromium-browser: Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allow... | n/a | 0.0104 |  |

---

Data as of 2026-11-13T08:00:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.