chromium-browser 70.0.3538.67-0ubuntu0.18.04.1: chromium-browser 70.0.3538.67-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 70.0.3538.67-0ubuntu0.18.04.1, released April 26, 2019, fixes 19 CVEs in chromium-browser. One of them is being exploited (CVE-2018-17463); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

None rated Critical

Exploited

CVE-2018-17463

Highest CVSS

n/a

No CVSS score published

Highest EPSS

0.8456

99th percentile

Priority of the 19 CVEs

Patch now 1
                                Urgent 0
                                High 0
                                Routine 18

Fixed package versions

Product	Release	Fixed in
chromium-browser	Ubuntu 18.04.6 LTS (bionic)	70.0.3538.67-0ubuntu0.18.04.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2018-17463	chromium-browser: Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute ar...	n/a	0.8456	KEVExploited
Routine	CVE-2018-17466	chromium-browser: Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an ou...	n/a	0.0285	None reported
Routine	CVE-2018-17458	chromium-browser: An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a...	n/a	0.0222	None reported
Routine	CVE-2018-5179	chromium-chromedriver: A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it t...	n/a	0.0167	None reported
Routine	CVE-2018-17465	chromium-browser: Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to...	n/a	0.0157	None reported
Routine	CVE-2018-17470	chromium-browser: A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised th...	n/a	0.0152	None reported
Routine	CVE-2018-17468	chromium-browser: Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a r...	n/a	0.0151	None reported
Routine	CVE-2018-17469	chromium-browser: Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to...	n/a	0.0149	None reported
Routine	CVE-2018-17472	chromium-browser: Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a r...	n/a	0.0149	None reported
Routine	CVE-2018-17462	chromium-browser: Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandb...	n/a	0.0148	None reported
Routine	CVE-2018-17467	chromium-browser: Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed...	n/a	0.0140	None reported
Routine	CVE-2018-17471	chromium-browser: Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure...	n/a	0.0139	None reported
Routine	CVE-2018-17474	chromium-browser: Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to...	n/a	0.0135	None reported
Routine	CVE-2018-17464	chromium-browser: Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker t...	n/a	0.0132	None reported
Routine	CVE-2018-17476	chromium-browser: Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the...	n/a	0.0132	None reported
Routine	CVE-2018-17475	chromium-browser: Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker t...	n/a	0.0119	None reported
Routine	CVE-2018-17477	chromium-browser: Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof th...	n/a	0.0119	None reported
Routine	CVE-2018-17473	chromium-browser: Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attack...	n/a	0.0111	None reported
Routine	CVE-2018-17459	chromium-chromedriver: Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote att...	n/a	0.0099	None reported

Also fixes CVE-2018-17463

chromium-browser-l10n 70.0.3538.67-0ubuntu0.18.04.1
chromium-browser-l10n on Ubuntu 18.04.6 LTS (bionic)
chromium-chromedriver 70.0.3538.67-0ubuntu0.18.04.1
chromium-chromedriver on Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 70.0.3538.67-0ubuntu0.18.04.1
chromium-codecs-ffmpeg on Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg-extra 70.0.3538.67-0ubuntu0.18.04.1
chromium-codecs-ffmpeg-extra on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-70.0.3538.67-0ubuntu0.18.04.1">chromium-browser 70.0.3538.67-0ubuntu0.18.04.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.