CVE-2019-5759 — Use After Free in Google Chrome

CWE-416 — Use After Free9 documents7 sources

Severity

9.6CRITICALNVD

EPSS

1.6%

top 18.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Chromium Debian Linux +4 more

Timeline

PublishedFeb 19

Latest updateMay 13

Description

Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HExploitability: 2.8 | Impact: 6.0

Affected Packages6 packages

▶CVEListV5google/chromeunspecified — 72.0.3626.81

▶NVDgoogle/chrome< 72.0.3626.81

▶Debianchromium/chromium< 72.0.3626.81-1+3

▶NVDredhat/enterprise_linux_server6.0

▶NVDredhat/enterprise_linux_desktop6.0

Also affects: Debian Linux 9.0, Fedora 29, 30

🔴Vulnerability Details

GHSA

GHSA-p384-cv6j-hxg8: Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72↗2022-05-13

▶

CVEList

CVE-2019-5759: Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72↗2019-02-19

▶

OSV

CVE-2019-5759: Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72↗2019-02-19

▶

📋Vendor Advisories

Red Hat

chromium-browser: Use after free in HTML select elements↗2019-01-29

▶

Debian

CVE-2019-5759: chromium - Incorrect lifetime handling in HTML select elements in Google Chrome on Android ...↗2019

▶

💬Community

Bugzilla

CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-↗2019-01-30

▶

Bugzilla

▶

Bugzilla

CVE-2019-5759 chromium-browser: Use after free in HTML select elements↗2019-01-30

▶