CVE-2019-5765 — Cleartext Storage of Sensitive Info in Google Chrome
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 68.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 19
Latest updateMay 13
Description
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages6 packages
Also affects: Debian Linux 9.0, Fedora 29, 30
🔴Vulnerability Details
3GHSA▶
GHSA-fp45-3gjm-cwrm: An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72↗2022-05-13
OSV▶
CVE-2019-5765: An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72↗2019-02-19
CVEList▶
CVE-2019-5765: An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72↗2019-02-19
📋Vendor Advisories
2💬Community
3Bugzilla▶
CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-↗2019-01-30
Bugzilla▶
CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-↗2019-01-30