Candidate: CVE-2018-16070 PublicDate: 2019-06-27 17:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16070 https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html Description: Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH] Patches_chromium-browser: upstream_chromium-browser: released (69.0.3497.81) precise/esm_chromium-browser: DNE trusty_chromium-browser: ignored (no longer updated) trusty/esm_chromium-browser: DNE (trusty was ignored [no longer updated]) xenial_chromium-browser: released (69.0.3497.81-0ubuntu0.16.04.1) bionic_chromium-browser: released (69.0.3497.81-0ubuntu0.18.04.1) cosmic_chromium-browser: released (69.0.3497.81-0ubuntu1) devel_chromium-browser: released (69.0.3497.81-0ubuntu1) Patches_oxide-qt: upstream_oxide-qt: needs-triage precise/esm_oxide-qt: DNE trusty_oxide-qt: ignored (Ubuntu touch end-of-life) trusty/esm_oxide-qt: DNE (trusty was ignored [Ubuntu touch end-of-life]) xenial_oxide-qt: ignored (Ubuntu touch end-of-life) esm-infra/xenial_oxide-qt: ignored (Ubuntu touch end-of-life) bionic_oxide-qt: DNE cosmic_oxide-qt: DNE devel_oxide-qt: DNE