CVE-2019-5796

Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

History

30 Mar 2022, 19:07

Type Values Removed Values Added
CWE CWE-787
CPE cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - Mailing List, Third Party Advisory
References (MISC) https://crbug.com/918861 - Exploit, Third Party Advisory (MISC) https://crbug.com/918861 - Exploit, Issue Tracking, Patch, Third Party Advisory

Information

Published : 2019-05-23 20:29

Updated : 2024-02-04 20:20


NVD link : CVE-2019-5796

Mitre link : CVE-2019-5796

CVE.ORG link : CVE-2019-5796


JSON object : View

Products Affected

opensuse

  • leap
  • backports_sle

google

  • chrome
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-787

Out-of-bounds Write