Google Chrome CVE-2019-5786 FileReader Use-After-Free Vulnerability

Google Chrome is prone to a use-after-free vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the browser. Failed attempts will likely cause a denial-of-service condition.

Recent assessments:

gwillcox-r7 at September 23, 2020 8:20pm UTC reported:

This was exploited in the wild as noted at <https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html&gt; and <https://blog.exodusintel.com/2019/05/17/windows-within-windows/&gt;

pbarry-r7 at November 25, 2019 3:26pm UTC reported:

This was exploited in the wild as noted at <https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html&gt; and <https://blog.exodusintel.com/2019/05/17/windows-within-windows/&gt;

wchen-r7 at September 12, 2019 6:07pm UTC reported:

This was exploited in the wild as noted at <https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html&gt; and <https://blog.exodusintel.com/2019/05/17/windows-within-windows/&gt;

Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 2