CVE catalog

CVE-2018-6109

UBUNTU-CVE-2018-6109

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.41% · Oct 25, 2026

readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuchromium-browser16.0445.0.2454.101-0ubuntu1.1201vulnerable
Ubuntuchromium-browser16.0447.0.2526.73-0ubuntu1.1218vulnerable
Ubuntuchromium-browser16.0447.0.2526.106-0ubuntu1.1221vulnerable
Ubuntuchromium-browser16.0448.0.2564.82-0ubuntu1.1222vulnerable
Ubuntuchromium-browser16.0448.0.2564.116-0ubuntu1.1229vulnerable
Ubuntuchromium-browser16.0449.0.2623.87-0ubuntu1.1232vulnerable
Ubuntuchromium-browser16.0449.0.2623.108-0ubuntu1.1233vulnerable
Ubuntuchromium-browser16.0450.0.2661.102-0ubuntu0.16.04.1.1237vulnerable
Ubuntuchromium-browser16.0451.0.2704.79-0ubuntu0.16.04.1.1242vulnerable
Ubuntuchromium-browser16.0452.0.2743.116-0ubuntu0.16.04.1.1250vulnerable
Ubuntuchromium-browser16.0453.0.2785.143-0ubuntu0.16.04.1.1254vulnerable
Ubuntuchromium-browser16.0453.0.2785.143-0ubuntu0.16.04.1.1257vulnerable
Ubuntuchromium-browser16.0455.0.2883.87-0ubuntu0.16.04.1263vulnerable
Ubuntuchromium-browser16.0456.0.2924.76-0ubuntu0.16.04.1268vulnerable
Ubuntuchromium-browser16.0457.0.2987.98-0ubuntu0.16.04.1276vulnerable
Ubuntuchromium-browser16.0458.0.3029.81-0ubuntu0.16.04.1277vulnerable
Ubuntuchromium-browser16.0458.0.3029.96-0ubuntu0.16.04.1279vulnerable
Ubuntuchromium-browser16.0458.0.3029.110-0ubuntu0.16.04.1281vulnerable
Ubuntuchromium-browser16.0459.0.3071.109-0ubuntu0.16.04.1289vulnerable
Ubuntuchromium-browser16.0459.0.3071.109-0ubuntu0.16.04.1291vulnerable
Ubuntuchromium-browser16.0460.0.3112.78-0ubuntu0.16.04.1293vulnerable
Ubuntuchromium-browser16.0460.0.3112.113-0ubuntu0.16.04.1298vulnerable
Ubuntuchromium-browser16.0461.0.3163.79-0ubuntu0.16.04.1300vulnerable
Ubuntuchromium-browser16.0461.0.3163.100-0ubuntu0.16.04.1306vulnerable
Ubuntuchromium-browser16.0462.0.3202.62-0ubuntu0.16.04.1308vulnerable
Ubuntuchromium-browser16.0462.0.3202.75-0ubuntu0.16.04.1313vulnerable
Ubuntuchromium-browser16.0462.0.3202.89-0ubuntu0.16.04.1315vulnerable
Ubuntuchromium-browser16.0462.0.3202.94-0ubuntu0.16.04.1317vulnerable
Ubuntuchromium-browser16.0463.0.3239.84-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser16.0463.0.3239.132-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser16.0464.0.3282.119-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser16.0464.0.3282.140-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser16.0464.0.3282.167-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser16.0465.0.3325.181-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser16.0466.0.3359.139-0ubuntu0.16.04.3fixed
Ubuntuoxide-qt16.041.9.5-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.10.3-0ubuntu0.15.10.1vulnerable
Ubuntuoxide-qt16.041.10.3-0ubuntu0.15.10.2vulnerable
Ubuntuoxide-qt16.041.11.3-0ubuntu3vulnerable
Ubuntuoxide-qt16.041.11.4-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.11.5-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.12.5-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.12.6-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.12.7-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.13.6-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.14.7-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.14.9-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.15.7-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.15.8-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.16.5-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.17.7-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.17.9-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.18.3-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.18.5-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.19.4-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.20.4-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.21.5-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser18.0461.0.3163.100-0ubuntu1.1378vulnerable
Ubuntuchromium-browser18.0462.0.3202.62-0ubuntu0.17.10.1380vulnerable
Ubuntuchromium-browser18.0462.0.3202.89-0ubuntu1.1386vulnerable
Ubuntuchromium-browser18.0462.0.3202.94-0ubuntu1.1388vulnerable
Ubuntuchromium-browser18.0463.0.3239.84-0ubuntu1vulnerable
Ubuntuchromium-browser18.0463.0.3239.108-0ubuntu1vulnerable
Ubuntuchromium-browser18.0464.0.3282.119-0ubuntu1vulnerable
Ubuntuchromium-browser18.0464.0.3282.140-0ubuntu1vulnerable
Ubuntuchromium-browser18.0464.0.3282.167-0ubuntu1vulnerable
Ubuntuchromium-browser18.0465.0.3325.146-0ubuntu1vulnerable
Ubuntuchromium-browser18.0465.0.3325.181-0ubuntu1vulnerable
Ubuntuchromium-browser18.0466.0.3359.139-0ubuntu0.18.04.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuchromium-browserdeb16.0466.0.3359.139-0ubuntu0.16.04.3Not reportedUBUNTU-CVE-2018-6109Not reported
Ubuntuchromium-browserdeb18.0466.0.3359.139-0ubuntu0.18.04.3Not reportedUBUNTU-CVE-2018-6109Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]