PT-2019-5073

CVE-2019-5816

Published

2019-05-04

Updated

2024-06-15

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 74.0.3729.108

Description The issue is related to a process lifetime problem in Google Chrome on Android, which could allow a remote attacker to potentially persist an exploited process via a crafted HTML page. This could lead to unauthorized access to confidential data, disruption of data integrity, and potentially cause a denial of service.

Recommendations For Google Chrome on Android versions prior to 74.0.3729.108, update to version 74.0.3729.108 or later to resolve the issue.

Exploitability

Exploit

Fix

Vendors

Affected products

Weakness enumeration

CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax

CWE-664: Improper Control of a Resource Through its Lifetime

Related identifiers

CVE-2019-5816

BDU:2020-01720