CVE-2019-5786
Medium · 6.5 CISA KEVCVSS
6.5
EPSS
61.1%
Published
Jun 27, 2019
CISA due date
Jun 13, 2022
The record
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | puppeteer | 0 | 1.13.0 |
| Debian:11 | chromium | 0 | 72.0.3626.121-1 |
| Debian:12 | chromium | 0 | 72.0.3626.121-1 |
| Debian:13 | chromium | 0 | 72.0.3626.121-1 |
| Debian:14 | chromium | 0 | 72.0.3626.121-1 |
| Debian:9 | chromium | 0 | 72.0.3626.122-1~deb9u1 |
| Red Hat:rhel_extras:6 | chromium-browser | 0 | 0:72.0.3626.121-1.el6_10 |
| Red Hat:rhel_extras:6 | chromium-browser-debuginfo | 0 | 0:72.0.3626.121-1.el6_10 |
| SUSE:Package Hub 12 SP2 | chromium | 0 | 72.0.3626.121-bp150.2.37.1 |
| SUSE:Package Hub 15 | chromium | 0 | 72.0.3626.121-bp150.2.37.1 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 72.0.3626.121-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 72.0.3626.121-0ubuntu0.18.04.1 |
| openSUSE:Leap 15.0 | chromium | 0 | 72.0.3626.121-bp150.2.37.1 |
| openSUSE:Tumbleweed | chromium | 0 | 93.0.4577.82-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
Related vulnerabilities
- CVE-2025-6558 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to… Also affects chromium
- CVE-2025-7656 Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker… Also affects chromium
- CVE-2025-6554 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to… Also affects chromium
- CVE-2025-6191 Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker… Also affects chromium
- CVE-2025-5959 Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker… Also affects chromium
- CVE-2025-5419 Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a… Also affects chromium
- CVE-2022-2160 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to… Also affects chromium
- CVE-2022-0303 security update Also affects chromium