CVE-2019-5851

Description

Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.328

Associated Vulnerability

VulnerabilityOS Platform
Update Google Chrome (76.0.3809.87) fixed multiple vulnerabilitesWindows
Update Google Chrome (x64) (76.0.3809.87) fixed multiple vulnerabilitesWindows
Multiple vulnerabilities are fixed in Update for Google Chrome For Mac (76.0.3809.87)Mac
chromium security update(DSA-4500-1) chromium_76.0.3809.100-1~deb10u1_amd64.debLinux
Update Google Chrome (76.0.3809.87) fixed multiple vulnerabilites (For Debian)Linux
Update Google Chrome (76.0.3809.87) fixed multiple vulnerabilites (For Centos)Linux
Update Google Chrome (76.0.3809.87) fixed multiple vulnerabilites (For RedHat)Linux
Update Google Chrome (76.0.3809.87) fixed multiple vulnerabilites (For Suse)Linux
Update Google Chrome (76.0.3809.87) fixed multiple vulnerabilites (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-310523Google Chrome (76.0.3809.87)
PATCH-310524Google Chrome (x64) (76.0.3809.87)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234