8.1
CVSSv3

CVE-2019-5849

Published: 25/11/2019 Updated: 07/11/2023
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P

Vulnerability Summary

Out of bounds read in Skia in Google Chrome before 75.0.3770.80 allowed a remote malicious user to obtain potentially sensitive information from process memory via a crafted HTML page.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

USN-4122-1 caused a regression in Firefox ...
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Several vulnerabilities have been discovered in the chromium web browser CVE-2019-5805 A use-after-free issue was discovered in the pdfium library CVE-2019-5806 Wen Xu discovered an integer overflow issue in the Angle library CVE-2019-5807 TimGMichaud discovered a memory corruption issue in the v8 javascript library CVE-2019-58 ...
Mozilla Foundation Security Advisory 2019-25 Security vulnerabilities fixed in Firefox 69 Announced September 3, 2019 Impact critical Products Firefox Fixed in Firefox 69 ...
An out-of-bounds read vulnerability exists in the Skia graphics library shipped in Firefox before 690, allowing for the possible leaking of data from memory ...
The Chrome team is delighted to announce the promotion of Chrome 75 to the stable channel for Windows, Mac and Linux This will roll out over the coming days/weeks Chrome 750377080 contains a number of fixes and improvements -- a list of changes is available in the log Watch out for upcoming Chrome and Chromium blog po ...