Lucene search
CISACISA-KEV-CVE-2019-13720HistoryMay 23, 2022 - 12:00 a.m.
Google Chrome WebAudio Use-After-Free Vulnerability
2022-05-2300:00:00
CISA
www.cisa.gov
6
google chrome
webaudio
use-after-free
vulnerability
remote attacker
heap corruption
crafted html page
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.974
Percentile
99.9%
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Related
securelist
securelist
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
2019-11-01 16:00:12
Researchers call for a determined path to cybersecurity
2020-12-07 10:00:53
Windows 0-day exploit CVE-2019-1458 used in Operation WizardOpium
2019-12-10 20:00:39
gentoo
gentoo
Qt WebEngine: Arbitrary code execution
2020-04-01 00:00:00
nessus
nessus
GLSA-202004-04 : Qt WebEngine: Arbitrary code execution
2020-04-02 00:00:00
Google Chrome < 78.0.3904.87 Multiple Vulnerabilities
2019-11-01 00:00:00
Google Chrome < 78.0.3904.87 Multiple Vulnerabilities
2019-11-01 00:00:00
cvelist
cvelist
CVE-2019-13720
2019-11-25 14:22:55
checkpoint_advisories
checkpoint_advisories
Google Chrome WebAudio Use After Free (CVE-2019-13720)
2019-12-25 00:00:00
archlinux
archlinux
[ASA-201911-2] qt5-webengine: arbitrary code execution
2019-11-02 00:00:00
[ASA-201911-7] electron: arbitrary code execution
2019-11-04 00:00:00
[ASA-201911-1] chromium: arbitrary code execution
2019-11-01 00:00:00
zdt
zdt
Google Chrome 78.0.3904.70 - Remote Code Execution Exploit
2022-05-12 00:00:00
ubuntucve
ubuntucve
CVE-2019-13720
2019-11-25 00:00:00
prion
prion
Design/Logic Flaw
2019-11-25 15:15:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Google Chrome
2019-11-04 12:40:28
Exploit for Out-of-bounds Write in Google Chrome
2020-03-21 16:21:16
cisa
cisa
Google Releases Security Updates for Chrome
2019-10-31 00:00:00
debiancve
debiancve
CVE-2019-13720
2019-11-25 15:15:33
talosblog
talosblog
Threat Source newsletter (Nov. 7, 2019)
2019-11-14 07:12:30
redhatcve
redhatcve
CVE-2019-13720
2019-11-04 18:56:15
nvd
nvd
CVE-2019-13720
2019-11-25 15:15:33
packetstorm
packetstorm
Google Chrome 78.0.3904.70 Remote Code Execution
2022-05-11 00:00:00
cve
cve
CVE-2019-13720
2019-11-25 15:15:33
exploitdb
exploitdb
Google Chrome 78.0.3904.70 - Remote Code Execution
2022-05-11 00:00:00
openvas
openvas
suse
suse
Security update for chromium (important)
2019-11-02 00:00:00
Security update for opera (important)
2019-12-10 00:00:00
Security update for chromium (important)
2019-11-04 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2019-10-31 00:00:00
kaspersky
kaspersky
KLA11716 Multiple vulnerabilities in Opera
2019-11-14 00:00:00
KLA11601 Multiple vulnerabilities in Google Chrome
2019-10-31 00:00:00
redhat
redhat
(RHSA-2019:3775) Important: chromium-browser security update
2019-11-07 06:56:43
fedora
fedora
[SECURITY] Fedora 31 Update: chromium-78.0.3904.87-1.fc31
2019-11-09 21:22:25
[SECURITY] Fedora 29 Update: chromium-78.0.3904.87-1.fc29
2019-11-15 03:20:57
[SECURITY] Fedora 30 Update: chromium-78.0.3904.87-1.fc30
2019-11-15 03:55:58
attackerkb
attackerkb
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
2019-10-10 00:00:00
CVE-2021-21166
2021-03-09 00:00:00
CVE-2019-1458
2019-12-10 00:00:00
threatpost
threatpost
SAS@Home Virtual Summit Showcases New Threat Intel, Industry Changes
2020-04-24 20:44:05
Google Discloses Chrome Flaw Exploited in the Wild
2019-11-01 15:35:03
Google Patches Actively-Exploited Zero-Day Bug in Chrome Browser
2020-10-21 12:23:29
thn
thn
New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!
2019-11-01 09:32:00
krebs
krebs
Patch Tuesday, November 2019 Edition
2019-11-12 22:04:32
googleprojectzero
googleprojectzero
TFW you-get-really-excited-you-patch-diffed-a-0day-used-in-the-wild-but-then-find-out-it-is-the-wrong-vuln
2020-04-02 00:00:00
Root Cause Analyses for 0-day In-the-Wild Exploits
2020-07-29 00:00:00
Detection Deficit: A Year in Review of 0-days Used In-The-Wild in 2019
2020-07-29 00:00:00
malwarebytes
malwarebytes
Update now! Chrome fix patches in-the-wild zero-day
2021-03-04 13:24:38
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2019-11-08 02:36:48
debian
debian
[SECURITY] [DSA 4562-1] chromium security update
2019-11-10 19:16:43
osv
osv
chromium - security update
2019-11-10 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.974
Percentile
99.9%
Related for CISA-KEV-CVE-2019-13720