Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11474
HistoryApr 23, 2019 - 12:00 a.m.

KLA11474 Multiple vulnerabilities in Google Chrome

2019-04-2300:00:00
Kaspersky Lab
threats.kaspersky.com
54

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.672 Medium

EPSS

Percentile

97.9%

JSON

Detect date:

04/23/2019

Severity:

High

Description:

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions and cause denial of service.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Google Chrome earlier than 74.0.3729.108

Solution:

Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Google Chrome download page

Original advisories:

Stable Channel Update for Desktop

Impacts:

ACE

Related products:

Google Chrome

CVE-IDS:

CVE-2019-58054.3Warning
CVE-2019-58066.8High
CVE-2019-58076.8High
CVE-2019-58086.8High
CVE-2019-58096.8High
CVE-2019-58104.3Warning
CVE-2019-58116.8High
CVE-2019-58136.8High
CVE-2019-58144.3Warning
CVE-2019-58155.0Warning
CVE-2019-58176.8High
CVE-2019-58184.3Warning
CVE-2019-58194.4Warning
CVE-2019-58206.8High
CVE-2019-58216.8High
CVE-2019-58226.8High
CVE-2019-58235.8High
CVE-2019-58254.3Warning
CVE-2019-58264.3Warning
CVE-2019-58124.3Warning
CVE-2019-58166.8High
CVE-2020-65034.3Warning
CVE-2020-65044.3Warning

References

Related

nessus 24
chrome 2
openvas 22
redhat 1
suse 4
archlinux 1
fedora 2
debian 3
osv 6
redhatcve 23
debiancve 23
cve 23
ubuntucve 23
prion 23
gentoo 1
attackerkb 1
cisa_kev 1
github 1
packetstorm 1
checkpoint_advisories 1
githubexploit 1
zdt 1
metasploit 1
mageia 1
exploitdb 1
ubuntu 2
cloudfoundry 1
photon 4
rosalinux 1
nessus
nessus
Google Chrome < 74.0.3729.108 Multiple Vulnerabilities
2019-04-25 00:00:00
Google Chrome < 74.0.3729.108 Multiple Vulnerabilities
2019-04-25 00:00:00
openSUSE Security Update : chromium (openSUSE-2019-1325)
2019-05-06 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2019-04-23 00:00:00
Stable Channel Update for Desktop
2019-04-30 00:00:00
openvas
openvas
Google Chrome Security Updates (stable-channel-update-for-desktop_23-2019-04) - Mac OS X
2019-04-26 00:00:00
Google Chrome Security Updates (stable-channel-update-for-desktop_23-2019-04) - Linux
2019-04-26 00:00:00
openSUSE: Security Advisory for chromium (openSUSE-SU-2019:1325-1)
2019-05-05 00:00:00
redhat
redhat
(RHSA-2019:1021) Important: chromium-browser security update
2019-05-07 15:56:33
suse
suse
Security update for chromium (important)
2019-05-23 00:00:00
Security update for chromium (important)
2019-05-04 00:00:00
Security update for chromium (important)
2019-05-04 00:00:00
archlinux
archlinux
[ASA-201904-12] chromium: multiple issues
2019-04-24 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: chromium-75.0.3770.100-3.fc29
2019-07-25 01:51:57
[SECURITY] Fedora 30 Update: chromium-75.0.3770.100-2.fc30
2019-07-01 01:09:45
debian
debian
[SECURITY] [DSA 4500-1] chromium security update
2019-08-13 05:17:57
[SECURITY] [DSA 4500-1] chromium security update
2019-08-13 05:17:57
[SECURITY] [DLA 3101-1] libxslt security update
2022-09-09 13:08:41
osv
osv
chromium - security update
2019-08-12 00:00:00
Nokogiri implementation of libxslt vulnerable to heap corruption
2022-05-24 17:03:17
libxslt - security update
2022-09-09 00:00:00
redhatcve
redhatcve
CVE-2019-5816
2019-04-25 08:26:11
CVE-2019-5813
2019-04-25 08:24:33
CVE-2019-5821
2019-04-25 08:22:46
debiancve
debiancve
CVE-2019-5821
2019-06-27 17:15:00
CVE-2019-5808
2019-06-27 17:15:00
CVE-2019-5826
2019-11-25 20:15:00
cve
cve
CVE-2019-5810
2019-06-27 17:15:00
CVE-2019-5808
2019-06-27 17:15:00
CVE-2019-5807
2019-06-27 17:15:00
ubuntucve
ubuntucve
CVE-2019-5813
2019-06-27 00:00:00
CVE-2019-5826
2019-11-25 00:00:00
CVE-2019-5812
2019-06-27 00:00:00
prion
prion
Design/Logic Flaw
2019-11-25 20:15:00
Design/Logic Flaw
2019-06-27 17:15:00
Integer overflow
2019-06-27 17:15:00
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2019-08-15 00:00:00
attackerkb
attackerkb
CVE-2019-5825
2019-11-25 00:00:00
cisa_kev
cisa_kev
Google Chromium V8 Out-of-Bounds Write Vulnerability
2022-06-08 00:00:00
github
github
Nokogiri implementation of libxslt vulnerable to heap corruption
2022-05-24 17:03:17
packetstorm
packetstorm
Google Chrome 72 / 73 Array.map Corruption
2020-03-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Google Chrome Out-of-Bounds Write (CVE-2019-5825)
2022-06-20 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Google Chrome
2019-11-23 11:35:34
zdt
zdt
Google Chrome 72 / 73 Array.map Corruption Exploit
2020-03-06 00:00:00
metasploit
metasploit
Google Chrome 72 and 73 Array.map exploit
2019-11-13 14:26:44
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2019-09-21 14:07:28
exploitdb
exploitdb
Google Chrome 72 and 73 - Array.map Out-of-Bounds Write (Metasploit)
2020-03-09 00:00:00
ubuntu
ubuntu
Libxslt vulnerabilities
2022-08-22 00:00:00
Libxslt vulnerabilities
2022-08-22 00:00:00
cloudfoundry
cloudfoundry
USN-5575-1: Libxslt vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0263
2019-12-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0263
2019-12-27 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0196
2019-12-20 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1906
2021-07-02 17:26:03

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.672 Medium

EPSS

Percentile

97.9%

JSON
Related for KLA11474
nessus24chrome2openvas22redhat1suse4archlinux1fedora2debian3osv6redhatcve23debiancve23cve23ubuntucve23prion23gentoo1attackerkb1cisa_kev1github1packetstorm1checkpoint_advisories1githubexploit1zdt1metasploit1mageia1exploitdb1ubuntu2cloudfoundry1photon4rosalinux1