CVE-2019-5823: Medium severity google chrome (trace event) vulnerability

Q: What is the severity of CVE-2019-5823?

CVE-2019-5823 is classified as a high-severity vulnerability due to its ability to allow remote attackers to bypass navigation restrictions in Google Chrome.

Q: How do I fix CVE-2019-5823?

To fix CVE-2019-5823, users should update Google Chrome to version 74.0.3729.108 or later.

Q: Which versions of Google Chrome are affected by CVE-2019-5823?

Google Chrome versions prior to 74.0.3729.108 are affected by CVE-2019-5823.

Q: Is CVE-2019-5823 exploitable in service workers?

Yes, CVE-2019-5823 specifically affects the enforcement of policies in service workers.

Q: Can CVE-2019-5823 impact user security?

Yes, CVE-2019-5823 can impact user security by allowing attackers to navigate users to unintended content or malicious sites.

Published Feb 8, 2019

Updated

Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Credit

David Erceg

Affected Software

10 affected componentsFixes available

debian/chromium

90.0.4430.212-1~deb10u1116.0.5845.180-1~deb11u1120.0.6099.129-1~deb11u1119.0.6045.199-1~deb12u1120.0.6099.129-1~deb12u1120.0.6099.129-1

Google Chrome<74.0.3729.108

74.0.3729.108

Google Chrome<74.0.3729.108

Debian Debian Linux=10.0

Fedoraproject Fedora=29

Fedoraproject Fedora=30

openSUSE Backports=sle-15

openSUSE Leap=15.0

openSUSE Leap=15.1

openSUSE Leap=42.3

Remediation

Patch Available

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html

Event History

Feb 8, 2019

CVE Published

12:00 AM

Jun 27, 2019

CVE Published

via MITRE·04:13 PM

Data Sourced

via MITRE·04:13 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

286281954613599470

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2019-5823?