CVE-2019-13710: Medium severity google chrome (trace event) vulnerability
Published Nov 25, 2019
·Updated
Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.
Affected Software
2 affected components
Google Chrome<78.0.3904.70
openSUSE Backports=15.0-sp1
Event History
Nov 25, 2019
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-13710?
CVE-2019-13710 has been classified as a high severity vulnerability due to its potential to allow attackers to bypass download restrictions.
2
How do I fix CVE-2019-13710?
To fix CVE-2019-13710, update Google Chrome to version 78.0.3904.70 or later.
3
What software is affected by CVE-2019-13710?
CVE-2019-13710 affects Google Chrome versions prior to 78.0.3904.70 and openSUSE Backports version 15.0-sp1.
4
What types of attacks can CVE-2019-13710 facilitate?
CVE-2019-13710 can facilitate remote attacks that exploit insufficient validation of untrusted input in file downloads.
5
When was CVE-2019-13710 disclosed?
CVE-2019-13710 was disclosed as part of a security update in October 2019.