CVE-2019-5866: Critical severity google chrome (trace event) vulnerability

Q: Which Chrome versions are affected?

Google Chrome versions prior to 75.0.3770.142 are affected.

Q: What does an attacker need to exploit this issue?

An attacker can attempt exploitation remotely by providing a crafted HTML page. The CVSS vector indicates no privileges or user interaction are required.

Q: What is the likely security impact of successful exploitation?

Successful exploitation could potentially cause heap corruption. The assigned CVSS score indicates high potential impact to confidentiality, integrity, and availability.

Published Jul 15, 2019

Updated

Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected Software

2 affected componentsFixes available

Google Chrome<75.0.3770.142

75.0.3770.142

Google Chrome<75.0.3770.142

Event History

Jul 15, 2019

CVE Published

12:00 AM

Nov 25, 2019

CVE Published

via MITRE·02:22 PM

Data Sourced

via MITRE·02:22 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

8194798344383305487

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

Which Chrome versions are affected?

Google Chrome versions prior to 75.0.3770.142 are affected.

What does an attacker need to exploit this issue?

An attacker can attempt exploitation remotely by providing a crafted HTML page. The CVSS vector indicates no privileges or user interaction are required.

What is the likely security impact of successful exploitation?

Successful exploitation could potentially cause heap corruption. The assigned CVSS score indicates high potential impact to confidentiality, integrity, and availability.

CVE-2019-5866: Critical severity google chrome (trace event) vulnerability

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

Which Chrome versions are affected?

What does an attacker need to exploit this issue?

What is the likely security impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which Chrome versions are affected?

What does an attacker need to exploit this issue?

What is the likely security impact of successful exploitation?