CVE-2019-5770

Description

Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.066

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (72.0.3626.81)Windows
Multiple vulnerabilities fixed in Google Chrome (72.0.3626.81)Windows
Multiple vulnerabilities are fixed in Update for Google Chrome For Mac (72.0.3626.81)Mac
Multiple vulnerabilities fixed in Google Chrome (72.0.3626.81) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (72.0.3626.81) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (72.0.3626.81) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (72.0.3626.81) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (72.0.3626.81) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-313039Google Chrome (x64) (80.0.3987.122)
PATCH-313039Google Chrome (x64) (80.0.3987.122)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234