Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-5786

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

VectorNETWORK

PublishedJun 27, 2019, 17:15

Published Bychrome-cve-admin@google.com

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

puppeteer(npm)01.13.0N/A

References

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html
https://crbug.com/936448
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-5786

Weakness Type

CWE-416

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK