CVE-2019-5794

Reference Links

• https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html (Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html
• https://crbug.com/935175
• https://code.google.com/p/chromium/issues/detail?id=935175
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1688209
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1688208
• https://access.redhat.com/errata/RHSA-2019:0708
• https://bugzilla.redhat.com/show_bug.cgi?id=1688196

Parent vulnerabilities

(Appears in the following advisories)

• 8736584565359439648

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-5787
• CVE-2019-5788
• CVE-2019-5789
• CVE-2019-5790
• CVE-2019-5791
• CVE-2019-5792
• CVE-2019-5793
• CVE-2019-5795
• CVE-2019-5796
• CVE-2019-5797
• CVE-2019-5798
• CVE-2019-5799
• CVE-2019-5800
• CVE-2019-5801
• CVE-2019-5802
• CVE-2019-5803
• CVE-2019-5804

Frequently Asked Questions

• What is the severity of CVE-2019-5794?

  CVE-2019-5794 has been classified as a high-severity vulnerability due to its potential for domain spoofing.

• How do I fix CVE-2019-5794?

  To fix CVE-2019-5794, update your Google Chrome or Chromium browser to version 73.0.3683.75 or later.

• What types of browsers are affected by CVE-2019-5794?

  CVE-2019-5794 affects Google Chrome and Chromium browsers prior to version 73.0.3683.75.

• What is the risk associated with CVE-2019-5794?

  The primary risk associated with CVE-2019-5794 is that it allows remote attackers to spoof the security UI, potentially leading users to unknowingly interact with malicious sites.

• Is CVE-2019-5794 exploitable in real-world scenarios?

  Yes, CVE-2019-5794 is exploitable in real-world scenarios, particularly if users are misled by crafted HTML pages designed to mimic legitimate domains.