Published: 23/05/2019 Updated: 07/11/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows before 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
opensuse leap 42.3
opensuse leap 15.0
opensuse backports sle-15
opensuse leap 15.1

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2019-5787 Zhe Jin discovered a use-after-free issue CVE-2019-5788 Mark Brand discovered a use-after-free issue in the FileAPI implementation CVE-2019-5789 Mark Brand discovered a use-after-free issue in the WebMIDI implementation CVE-2019-5790 ...

A use-after-free issue has been found in the WebMIDI component of the chromium browser before 730368375 ...

The Chrome team is delighted to announce the promotion of Chrome 73 to the stable channel for Windows, Mac and Linux This will roll out over the coming days/weeks Chrome 730368375 contains a number of fixes and improvements -- a list of changes is available in the log Watch out for upcoming Chrome and Chromium blog po ...

MidiManagerWin uses a similar instance_id mechanism to the TaskService implementation to ensure that delayed tasks are only executed if the MidiManager instance that they were scheduled on is still alive However, this instance_id is an int, and there is no check that it hasn't overflowed, unlike in the linux and mac implementations (MidiManagerA ...

CWE-190 CWE-416 https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html https://crbug.com/921581 http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html https://access.redhat.com/errata/RHSA-2019:0708 https://nvd.nist.gov https://www.exploit-db.com/exploits/46570 https://www.debian.org/security/2019/dsa-4421

CVE-2019-5789

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect