CVE-2019-5782
High · 8.8CVSS
8.8
EPSS
13.4%
Published
Feb 19, 2019
CISA due date
—
The record
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | chromium | 0 | 72.0.3626.81-1 |
| Debian:12 | chromium | 0 | 72.0.3626.81-1 |
| Debian:13 | chromium | 0 | 72.0.3626.81-1 |
| Debian:9 | chromium | 0 | 72.0.3626.96-1~deb9u1 |
| Red Hat:rhel_extras:6 | chromium-browser | 0 | 0:72.0.3626.81-1.el6_10 |
| Red Hat:rhel_extras:6 | chromium-browser-debuginfo | 0 | 0:72.0.3626.81-1.el6_10 |
| SUSE:Package Hub 12 SP2 | chromium | 0 | 72.0.3626.96-88.1 |
| SUSE:Package Hub 15 | chromium | 0 | 72.0.3626.96-bp150.2.32.1 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 72.0.3626.119-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 72.0.3626.119-0ubuntu0.18.04.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 93.0.4577.82-1.1 |
Related vulnerabilities
- CVE-2025-6558 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to… Also affects chromium
- CVE-2025-7656 Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker… Also affects chromium
- CVE-2025-6554 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to… Also affects chromium
- CVE-2025-6191 Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker… Also affects chromium
- CVE-2025-5959 Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker… Also affects chromium
- CVE-2025-5419 Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a… Also affects chromium
- CVE-2023-0698 Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote… Also affects chromium
- CVE-2023-0704 Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77… Also affects chromium