PT-2019-4878
CVE-2019-13748
·
Publicado
2019-12-10
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
7.1
AltaMétricasAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 79.0.3945.79
Description
The issue is related to insufficient policy enforcement in developer tools, allowing a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This could enable an attacker to gain unauthorized access to confidential data.
Recommendations
For versions prior to 79.0.3945.79, update to version 79.0.3945.79 or later to resolve the issue. As a temporary workaround, consider restricting the use of developer tools until the update is applied.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾