CVE-2019-13705
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an...
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
4.3
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
CVE-2019-13705- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE List No score
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
CVE-2019-13705- Updated
- 2026-11-02
EUVDEUVD-2019-5125 No score
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
EUVD-2019-5125- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v376-h543-mfgr No score
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an...
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
GHSA-v376-h543-mfgr- Weakness
- CWE-200, CWE-269
- Updated
- 2026-11-02
OSV
4.3
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
CVE-2019-13705- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-13705
4.3
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
DEBIAN-CVE-2019-13705- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2019:3759
8.8
Red Hat Security Advisory: chromium-browser security update
- Record
RHSA-2019:3759- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-13705
4.3
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
- Record
UBUNTU-CVE-2019-13705- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0320 No score
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 78.0.3904.87 fixes security issues:
Multiple flaws were found in the way Chromium 77.0.3865.120 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-13699, CVE-2019-13700, CVE-2019-13701, CVE-2019-13702, CVE-2019-13703, CVE-2019-13704, CVE-2019-13705, CVE-2019-13706, CVE-2019-13707, CVE-2019-13708, CVE-2019-13709, CVE-2019-13710, CVE-2019-13711, CVE-2019-13713, CVE-2019-13714, CVE-2019-13715, CVE-2019-13716, CVE-2019-13717, CVE-2019-13718, CVE-2019-13719, CVE-2019-13720, CVE-2019-13721)
- Record
MGASA-2019-0320- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2420-1 No score
Security update for chromium, re2
This update for chromium, re2 fixes the following issues:
Chromium was updated to 78.0.3904.70 boo#1154806:
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- Various fixes from internal audits, fuzzing and other initiatives
- Use internal resources for icon and appdata
- Record
openSUSE-SU-2019:2420-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2424-1 No score
Security update for chromium, re2
This update for chromium, re2 fixes the following issues:
Chromium was updated to 78.0.3904.70 boo#1154806:
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- Various fixes from internal audits, fuzzing and other initiatives
- Use internal resources for icon and appdata
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:2424-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2425-1 No score
Security update for chromium, re2
This update for chromium, re2 fixes the following issues:
Chromium was updated to 78.0.3904.70 boo#1154806:
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- Various fixes from internal audits, fuzzing and other initiatives
- Use internal resources for icon and appdata
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2019:2425-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2447-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492)
Security issues fixed with this version update:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- CVE-2019-13693: Use-after-free in IndexedDB
- CVE-2019-13694: Use-after-free in WebRTC
- CVE-2019-13695: Use-after-free in audio
- CVE-2019-13696: Use-after-free in V8
- CVE-2019-13697: Cross-origin size leak.
- CVE-2019-13685: Use-after-free in UI
- CVE-2019-13688: Use-after-free in media
- CVE-2019-13687: Use-after-free in media
- CVE-2019-13686: Use-after-free in offline pages
- CVE-2019-5870: Use-after-free in media
- CVE-2019-5871: Heap overflow in Skia
- CVE-2019-5872: Use-after-free in Mojo
- CVE-2019-5874: External URIs may trigger other browsers
- CVE-2019-5875: URL bar spoof via download redirect
- CVE-2019-5876: Use-after-free in media
- CVE-2019-5877: Out-of-bounds access in V8
- CVE-2019-5878: Use-after-free in V8
- CVE-2019-5879: Extension can bypass same origin policy
- CVE-2019-5880: SameSite cookie bypass
- CVE-2019-5881: Arbitrary read in SwiftShader
- CVE-2019-13659: URL spoof
- CVE-2019-13660: Full screen notification overlap
- CVE-2019-13661: Full screen notification spoof
- CVE-2019-13662: CSP bypass
- CVE-2019-13663: IDN spoof
- CVE-2019-13664: CSRF bypass
- CVE-2019-13665: Multiple file download protection bypass
- CVE-2019-13666: Side channel using storage size estimate
- CVE-2019-13667: URI bar spoof when using external app URIs
- CVE-2019-13668: Global window leak via console
- CVE-2019-13669: HTTP authentication spoof
- CVE-2019-13670: V8 memory corruption in regex
- CVE-2019-13671: Dialog box fails to show origin
- CVE-2019-13673: Cross-origin information leak using devtools
- CVE-2019-13674: IDN spoofing
- CVE-2019-13675: Extensions can be disabled by trailing slash
- CVE-2019-13676: Google URI shown for certificate warning
- CVE-2019-13677: Chrome web store origin needs to be isolated
- CVE-2019-13678: Download dialog spoofing
- CVE-2019-13679: User gesture needed for printing
- CVE-2019-13680: IP address spoofing to servers
- CVE-2019-13681: Bypass on download restrictions
- CVE-2019-13682: Site isolation bypass
- CVE-2019-13683: Exceptions leaked by devtools
- CVE-2019-5869: Use-after-free in Blink
- CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
- CVE-2019-5867: Out-of-bounds read in V8
- CVE-2019-5850: Use-after-free in offline page fetcher
- CVE-2019-5860: Use-after-free in PDFium
- CVE-2019-5853: Memory corruption in regexp length check
- CVE-2019-5851: Use-after-poison in offline audio context
- CVE-2019-5859: res: URIs can load alternative browsers
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions
- CVE-2019-5855: Integer overflow in PDFium
- CVE-2019-5865: Site isolation bypass from compromised renderer
- CVE-2019-5858:…
- Record
openSUSE-SU-2019:2447-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0010-1 No score
Security update for chromium, re2
This update for chromium, re2 fixes the following issues:
Chromium was updated to 78.0.3904.70 boo#1154806:
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- Various fixes from internal audits, fuzzing and other initiatives
- Use internal resources for icon and appdata
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2020:0010-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 78.0.3904.87-1 | 78.0.3904.87-1 |
chromiumDebian:13 |
before 78.0.3904.87-1 | 78.0.3904.87-1 |
chromiumDebian:14 |
before 78.0.3904.87-1 | 78.0.3904.87-1 |
chromiumDebian:10 From an advisory covering 71 CVEs |
before 78.0.3904.97-1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 7 moreShow less76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.87-1 |
78.0.3904.97-1~deb10u1 |
chromium-browser-stableMageia:7 From an advisory covering 22 CVEs |
before 78.0.3904.87-1.mga7 | 78.0.3904.87-1.mga7 |
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 0:78.0.3904.70-1.el6_10 | 0:78.0.3904.70-1.el6_10 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 0:78.0.3904.70-1.el6_10 | 0:78.0.3904.70-1.el6_10 |
chromium-browserUbuntu:16.04:LTS |
before 78.0.3904.70-0ubuntu0.16.04.2, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
78.0.3904.70-0ubuntu0.16.04.2 |
chromium-browserUbuntu:18.04:LTS |
before 78.0.3904.70-0ubuntu0.18.04.2, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 27 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.1 |
78.0.3904.70-0ubuntu0.18.04.2 |
chromiumopenSUSE:Leap 15.0 From an advisory covering 21 CVEs |
before 78.0.3904.70-lp151.2.39.1 | 78.0.3904.70-lp151.2.39.1 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
re2openSUSE:Leap 15.0 From an advisory covering 21 CVEs |
before 20190901-lp151.10.3.1 | 20190901-lp151.10.3.1 |
chromiumopenSUSE:Leap 15.1 From an advisory covering 21 CVEs |
before 78.0.3904.70-lp151.2.39.1 | 78.0.3904.70-lp151.2.39.1 |
re2openSUSE:Leap 15.1 From an advisory covering 21 CVEs |
before 20190901-lp151.10.3.1 | 20190901-lp151.10.3.1 |
chromiumSUSE:Package Hub 15 From an advisory covering 21 CVEs |
before 78.0.3904.70-bp150.240.1 | 78.0.3904.70-bp150.240.1 |
re2SUSE:Package Hub 15 From an advisory covering 21 CVEs |
before 20190901-bp150.25.1 | 20190901-bp150.25.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 21 CVEs |
before 78.0.3904.70-bp151.3.21.1 | 78.0.3904.70-bp151.3.21.1 |
re2SUSE:Package Hub 15 SP1 From an advisory covering 21 CVEs |
before 20190901-bp151.6.3.1 | 20190901-bp151.6.3.1 |
chromiumSUSE:Package Hub 12 SP3 From an advisory covering 86 CVEs |
before 78.0.3904.87-10.1 | 78.0.3904.87-10.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 21 CVEs |
before 78.0.3904.70-bp151.3.50.1 | 78.0.3904.70-bp151.3.50.1 |
re2SUSE:Package Hub 15 SP1 From an advisory covering 21 CVEs |
before 20190901-bp151.6.9.1 | 20190901-bp151.6.9.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-13705 is a medium vulnerability (CVSS 4.3) in Google Chrome, published November 1, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. Fixed in chromium 78.0.3904.87-1.
References
chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html
crbug.com/989078
lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html
nvd.nist.gov/vuln/detail/CVE-2019-13705
github.com/advisories/GHSA-v376-h543-mfgr
security-tracker.debian.org/tracker/CVE-2019-13705
Show 194 moreShow less
advisories.mageia.org/MGASA-2019-0320.html
bugs.mageia.org/show_bug.cgi?id=25655
chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html
access.redhat.com/errata/RHSA-2019:3759
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1764756
bugzilla.redhat.com/show_bug.cgi?id=1764757
bugzilla.redhat.com/show_bug.cgi?id=1764758
bugzilla.redhat.com/show_bug.cgi?id=1764759
bugzilla.redhat.com/show_bug.cgi?id=1764760
bugzilla.redhat.com/show_bug.cgi?id=1764761
bugzilla.redhat.com/show_bug.cgi?id=1764762
bugzilla.redhat.com/show_bug.cgi?id=1764763
bugzilla.redhat.com/show_bug.cgi?id=1764764
bugzilla.redhat.com/show_bug.cgi?id=1764765
bugzilla.redhat.com/show_bug.cgi?id=1764766
bugzilla.redhat.com/show_bug.cgi?id=1764767
bugzilla.redhat.com/show_bug.cgi?id=1764768
bugzilla.redhat.com/show_bug.cgi?id=1764769
bugzilla.redhat.com/show_bug.cgi?id=1764770
bugzilla.redhat.com/show_bug.cgi?id=1764771
bugzilla.redhat.com/show_bug.cgi?id=1764772
bugzilla.redhat.com/show_bug.cgi?id=1764773
bugzilla.redhat.com/show_bug.cgi?id=1764774
bugzilla.redhat.com/show_bug.cgi?id=1764775
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3759.json
access.redhat.com/security/cve/CVE-2019-13699
cve.org/CVERecord?id=CVE-2019-13699
nvd.nist.gov/vuln/detail/CVE-2019-13699
access.redhat.com/security/cve/CVE-2019-13700
cve.org/CVERecord?id=CVE-2019-13700
nvd.nist.gov/vuln/detail/CVE-2019-13700
access.redhat.com/security/cve/CVE-2019-13701
cve.org/CVERecord?id=CVE-2019-13701
nvd.nist.gov/vuln/detail/CVE-2019-13701
access.redhat.com/security/cve/CVE-2019-13702
cve.org/CVERecord?id=CVE-2019-13702
nvd.nist.gov/vuln/detail/CVE-2019-13702
access.redhat.com/security/cve/CVE-2019-13703
cve.org/CVERecord?id=CVE-2019-13703
nvd.nist.gov/vuln/detail/CVE-2019-13703
access.redhat.com/security/cve/CVE-2019-13704
cve.org/CVERecord?id=CVE-2019-13704
nvd.nist.gov/vuln/detail/CVE-2019-13704
access.redhat.com/security/cve/CVE-2019-13705
cve.org/CVERecord?id=CVE-2019-13705
access.redhat.com/security/cve/CVE-2019-13706
cve.org/CVERecord?id=CVE-2019-13706
nvd.nist.gov/vuln/detail/CVE-2019-13706
access.redhat.com/security/cve/CVE-2019-13707
cve.org/CVERecord?id=CVE-2019-13707
nvd.nist.gov/vuln/detail/CVE-2019-13707
access.redhat.com/security/cve/CVE-2019-13708
cve.org/CVERecord?id=CVE-2019-13708
nvd.nist.gov/vuln/detail/CVE-2019-13708
access.redhat.com/security/cve/CVE-2019-13709
cve.org/CVERecord?id=CVE-2019-13709
nvd.nist.gov/vuln/detail/CVE-2019-13709
access.redhat.com/security/cve/CVE-2019-13710
cve.org/CVERecord?id=CVE-2019-13710
nvd.nist.gov/vuln/detail/CVE-2019-13710
access.redhat.com/security/cve/CVE-2019-13711
cve.org/CVERecord?id=CVE-2019-13711
nvd.nist.gov/vuln/detail/CVE-2019-13711
access.redhat.com/security/cve/CVE-2019-13713
cve.org/CVERecord?id=CVE-2019-13713
nvd.nist.gov/vuln/detail/CVE-2019-13713
access.redhat.com/security/cve/CVE-2019-13714
cve.org/CVERecord?id=CVE-2019-13714
nvd.nist.gov/vuln/detail/CVE-2019-13714
access.redhat.com/security/cve/CVE-2019-13715
cve.org/CVERecord?id=CVE-2019-13715
nvd.nist.gov/vuln/detail/CVE-2019-13715
access.redhat.com/security/cve/CVE-2019-13716
cve.org/CVERecord?id=CVE-2019-13716
nvd.nist.gov/vuln/detail/CVE-2019-13716
access.redhat.com/security/cve/CVE-2019-13717
cve.org/CVERecord?id=CVE-2019-13717
nvd.nist.gov/vuln/detail/CVE-2019-13717
access.redhat.com/security/cve/CVE-2019-13718
cve.org/CVERecord?id=CVE-2019-13718
nvd.nist.gov/vuln/detail/CVE-2019-13718
access.redhat.com/security/cve/CVE-2019-13719
cve.org/CVERecord?id=CVE-2019-13719
nvd.nist.gov/vuln/detail/CVE-2019-13719
ubuntu.com/security/CVE-2019-13705
lists.opensuse.org/archives/list/[email protected]/thread/3NWTA6MINHDECNVPEESVOI4YS5GWLB2W
bugzilla.suse.com/1154806
suse.com/security/cve/CVE-2019-13699
suse.com/security/cve/CVE-2019-13700
suse.com/security/cve/CVE-2019-13701
suse.com/security/cve/CVE-2019-13702
suse.com/security/cve/CVE-2019-13703
suse.com/security/cve/CVE-2019-13704
suse.com/security/cve/CVE-2019-13705
suse.com/security/cve/CVE-2019-13706
suse.com/security/cve/CVE-2019-13707
suse.com/security/cve/CVE-2019-13708
suse.com/security/cve/CVE-2019-13709
suse.com/security/cve/CVE-2019-13710
suse.com/security/cve/CVE-2019-13711
suse.com/security/cve/CVE-2019-13713
suse.com/security/cve/CVE-2019-13714
suse.com/security/cve/CVE-2019-13715
suse.com/security/cve/CVE-2019-13716
suse.com/security/cve/CVE-2019-13717
suse.com/security/cve/CVE-2019-13718
suse.com/security/cve/CVE-2019-13719
suse.com/security/cve/CVE-2019-15903
lists.opensuse.org/archives/list/[email protected]/thread/PWAZQUNDL6EYARWSXF52VFRXI6QGOKQ5
lists.opensuse.org/archives/list/[email protected]/thread/PUHPSOYGL3R2UY6Q72GDJBKT62EGZHYF
lists.opensuse.org/archives/list/[email protected]/thread/QNJAWHUQKXHQBG3I7GI4ACW3CYHDJAHM
bugzilla.suse.com/1143492
bugzilla.suse.com/1144625
bugzilla.suse.com/1145242
bugzilla.suse.com/1146219
bugzilla.suse.com/1149143
bugzilla.suse.com/1150425
bugzilla.suse.com/1151229
bugzilla.suse.com/1153660
bugzilla.suse.com/1155643
suse.com/security/cve/CVE-2019-13659
suse.com/security/cve/CVE-2019-13660
suse.com/security/cve/CVE-2019-13661
suse.com/security/cve/CVE-2019-13662
suse.com/security/cve/CVE-2019-13663
suse.com/security/cve/CVE-2019-13664
suse.com/security/cve/CVE-2019-13665
suse.com/security/cve/CVE-2019-13666
suse.com/security/cve/CVE-2019-13667
suse.com/security/cve/CVE-2019-13668
suse.com/security/cve/CVE-2019-13669
suse.com/security/cve/CVE-2019-13670
suse.com/security/cve/CVE-2019-13671
suse.com/security/cve/CVE-2019-13673
suse.com/security/cve/CVE-2019-13674
suse.com/security/cve/CVE-2019-13675
suse.com/security/cve/CVE-2019-13676
suse.com/security/cve/CVE-2019-13677
suse.com/security/cve/CVE-2019-13678
suse.com/security/cve/CVE-2019-13679
suse.com/security/cve/CVE-2019-13680
suse.com/security/cve/CVE-2019-13681
suse.com/security/cve/CVE-2019-13682
suse.com/security/cve/CVE-2019-13683
suse.com/security/cve/CVE-2019-13685
suse.com/security/cve/CVE-2019-13686
suse.com/security/cve/CVE-2019-13687
suse.com/security/cve/CVE-2019-13688
suse.com/security/cve/CVE-2019-13693
suse.com/security/cve/CVE-2019-13694
suse.com/security/cve/CVE-2019-13695
suse.com/security/cve/CVE-2019-13696
suse.com/security/cve/CVE-2019-13697
suse.com/security/cve/CVE-2019-13720
suse.com/security/cve/CVE-2019-13721
suse.com/security/cve/CVE-2019-5850
suse.com/security/cve/CVE-2019-5851
suse.com/security/cve/CVE-2019-5852
suse.com/security/cve/CVE-2019-5853
suse.com/security/cve/CVE-2019-5854
suse.com/security/cve/CVE-2019-5855
suse.com/security/cve/CVE-2019-5856
suse.com/security/cve/CVE-2019-5857
suse.com/security/cve/CVE-2019-5858
suse.com/security/cve/CVE-2019-5859
suse.com/security/cve/CVE-2019-5860
suse.com/security/cve/CVE-2019-5861
suse.com/security/cve/CVE-2019-5862
suse.com/security/cve/CVE-2019-5863
suse.com/security/cve/CVE-2019-5864
suse.com/security/cve/CVE-2019-5865
suse.com/security/cve/CVE-2019-5867
suse.com/security/cve/CVE-2019-5868
suse.com/security/cve/CVE-2019-5869
suse.com/security/cve/CVE-2019-5870
suse.com/security/cve/CVE-2019-5871
suse.com/security/cve/CVE-2019-5872
suse.com/security/cve/CVE-2019-5874
suse.com/security/cve/CVE-2019-5875
suse.com/security/cve/CVE-2019-5876
suse.com/security/cve/CVE-2019-5877
suse.com/security/cve/CVE-2019-5878
suse.com/security/cve/CVE-2019-5879
suse.com/security/cve/CVE-2019-5880
suse.com/security/cve/CVE-2019-5881
lists.opensuse.org/archives/list/[email protected]/thread/NHWBJKQPSZZUXFRQCXMMXQYJB6ONVGNX
suse.com/security/cve/CVE-2017-11215
suse.com/security/cve/CVE-2017-11225
suse.com/security/cve/CVE-2017-15386
suse.com/security/cve/CVE-2017-15387
suse.com/security/cve/CVE-2017-15388
suse.com/security/cve/CVE-2017-15389
suse.com/security/cve/CVE-2017-15390
Left out here: 3 versions, 2,217 references and the rest of 1 source description. The JSON record has them.