PT-2019-4985
CVE-2019-13685
·
تاريخ النشر
2019-09-18
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 77.0.3865.90
Description
The issue is related to a use after free vulnerability in the sharing view of Google Chrome, which can be exploited by a remote attacker via a crafted HTML page, potentially leading to heap corruption. This vulnerability allows an attacker to gain unauthorized access to information and disrupt its integrity and availability. The vulnerability is caused by accessing already freed memory in handlers related to the user interface.
Recommendations
For Google Chrome versions prior to 77.0.3865.90, update to version 77.0.3865.90 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could exploit this vulnerability. Restrict access to sensitive information until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾