PT-2019-4985
CVE-2019-13685
·
Publicado
2019-09-18
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 77.0.3865.90
Description
The issue is related to a use after free vulnerability in the sharing view of Google Chrome, which can be exploited by a remote attacker via a crafted HTML page, potentially leading to heap corruption. This vulnerability allows an attacker to gain unauthorized access to information and disrupt its integrity and availability. The vulnerability is caused by accessing already freed memory in handlers related to the user interface.
Recommendations
For Google Chrome versions prior to 77.0.3865.90, update to version 77.0.3865.90 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could exploit this vulnerability. Restrict access to sensitive information until the update is applied.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾