CVE-2019-5861
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote...
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
4.3
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
CVE-2019-5861- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-1021
- Updated
- 2026-11-02
CVE List No score
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
CVE-2019-5861- Updated
- 2026-11-02
EUVDEUVD-2019-15432 No score
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
EUVD-2019-15432- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jr83-rwfm-7r6r No score
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote...
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
GHSA-jr83-rwfm-7r6r- Updated
- 2026-11-02
OSV
4.3
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
CVE-2019-5861- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-5861
4.3
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
DEBIAN-CVE-2019-5861- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2019:2427
8.8
Red Hat Security Advisory: chromium-browser security update
- Record
RHSA-2019:2427- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-5861
4.3
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page.
- Record
UBUNTU-CVE-2019-5861- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0283 No score
Updated chromium-browser-stable packages fix security vulnerabilities
Multiple flaws were found in the way Chromium 73.0.3683.103 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-5805, CVE-2019-5806, CVE-2019-5807, CVE-2019-5808, CVE-2019-5809, CVE-2019-5810, CVE-2019-5811, CVE-2019-5812, CVE-2019-5813, CVE-2019-5814, CVE-2019-5815, CVE-2019-5816, CVE-2019-5817, CVE-2019-5818, CVE-2019-5819, CVE-2019-5820, CVE-2019-5821, CVE-2019-5822, CVE-2019-5823, CVE-2019-5824, CVE-2019-5825, CVE-2019-5826, CVE-2019-5827, CVE-2019-5828, CVE-2019-5829, CVE-2019-5830, CVE-2019-5831, CVE-2019-5832, CVE-2019-5833, CVE-2019-5834, CVE-2019-5835, CVE-2019-5836, CVE-2019-5837, CVE-2019-5838, CVE-2019-5839, CVE-2019-5840, CVE-2019-5842, CVE-2019-5847, CVE-2019-5848, CVE-2019-5849, CVE-2019-5850, CVE-2019-5851, CVE-2019-5852, CVE-2019-5853, CVE-2019-5854, CVE-2019-5855, CVE-2019-5856, CVE-2019-5857, CVE-2019-5858, CVE-2019-5859, CVE-2019-5860, CVE-2019-5861, CVE-2019-5862, CVE-2019-5863, CVE-2019-5864, CVE-2019-5865, CVE-2019-5866, CVE-2019-5867, CVE-2019-5868, CVE-2019-5869, CVE-2019-5870, CVE-2019-5871, CVE-2019-5872, CVE-2019-5873, CVE-2019-5874, CVE-2019-5875, CVE-2019-5876, CVE-2019-5877, CVE-2019-5878, CVE-2019-5879, CVE-2019-5880, CVE-2019-5881, CVE-2019-13659, CVE-2019-13660, CVE-2019-13661, CVE-2019-13662, CVE-2019-13663, CVE-2019-13664, CVE-2019-13665, CVE-2019-13666, CVE-2019-13667, CVE-2019-13668, CVE-2019-13669, CVE-2019-13670, CVE-2019-13671, CVE-2019-13673, CVE-2019-13674, CVE-2019-13675, CVE-2019-13676, CVE-2019-13677, CVE-2019-13678, CVE-2019-13679, CVE-2019-13680, CVE-2019-13681, CVE-2019-13682, CVE-2019-13683)
- Record
MGASA-2019-0283- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1848-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
- Record
openSUSE-SU-2019:1848-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1849-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
- Record
openSUSE-SU-2019:1849-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1853-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:1853-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1901-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2019:1901-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2447-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492)
Security issues fixed with this version update:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- CVE-2019-13693: Use-after-free in IndexedDB
- CVE-2019-13694: Use-after-free in WebRTC
- CVE-2019-13695: Use-after-free in audio
- CVE-2019-13696: Use-after-free in V8
- CVE-2019-13697: Cross-origin size leak.
- CVE-2019-13685: Use-after-free in UI
- CVE-2019-13688: Use-after-free in media
- CVE-2019-13687: Use-after-free in media
- CVE-2019-13686: Use-after-free in offline pages
- CVE-2019-5870: Use-after-free in media
- CVE-2019-5871: Heap overflow in Skia
- CVE-2019-5872: Use-after-free in Mojo
- CVE-2019-5874: External URIs may trigger other browsers
- CVE-2019-5875: URL bar spoof via download redirect
- CVE-2019-5876: Use-after-free in media
- CVE-2019-5877: Out-of-bounds access in V8
- CVE-2019-5878: Use-after-free in V8
- CVE-2019-5879: Extension can bypass same origin policy
- CVE-2019-5880: SameSite cookie bypass
- CVE-2019-5881: Arbitrary read in SwiftShader
- CVE-2019-13659: URL spoof
- CVE-2019-13660: Full screen notification overlap
- CVE-2019-13661: Full screen notification spoof
- CVE-2019-13662: CSP bypass
- CVE-2019-13663: IDN spoof
- CVE-2019-13664: CSRF bypass
- CVE-2019-13665: Multiple file download protection bypass
- CVE-2019-13666: Side channel using storage size estimate
- CVE-2019-13667: URI bar spoof when using external app URIs
- CVE-2019-13668: Global window leak via console
- CVE-2019-13669: HTTP authentication spoof
- CVE-2019-13670: V8 memory corruption in regex
- CVE-2019-13671: Dialog box fails to show origin
- CVE-2019-13673: Cross-origin information leak using devtools
- CVE-2019-13674: IDN spoofing
- CVE-2019-13675: Extensions can be disabled by trailing slash
- CVE-2019-13676: Google URI shown for certificate warning
- CVE-2019-13677: Chrome web store origin needs to be isolated
- CVE-2019-13678: Download dialog spoofing
- CVE-2019-13679: User gesture needed for printing
- CVE-2019-13680: IP address spoofing to servers
- CVE-2019-13681: Bypass on download restrictions
- CVE-2019-13682: Site isolation bypass
- CVE-2019-13683: Exceptions leaked by devtools
- CVE-2019-5869: Use-after-free in Blink
- CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
- CVE-2019-5867: Out-of-bounds read in V8
- CVE-2019-5850: Use-after-free in offline page fetcher
- CVE-2019-5860: Use-after-free in PDFium
- CVE-2019-5853: Memory corruption in regexp length check
- CVE-2019-5851: Use-after-poison in offline audio context
- CVE-2019-5859: res: URIs can load alternative browsers
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions
- CVE-2019-5855: Integer overflow in PDFium
- CVE-2019-5865: Site isolation bypass from compromised renderer
- CVE-2019-5858:…
- Record
openSUSE-SU-2019:2447-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 76.0.3809.87-1 | 76.0.3809.87-1 |
chromiumDebian:13 |
before 76.0.3809.87-1 | 76.0.3809.87-1 |
chromiumDebian:14 |
before 76.0.3809.87-1 | 76.0.3809.87-1 |
chromiumDebian:10 From an advisory covering 58 CVEs |
before 76.0.3809.100-1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 4 moreShow less76.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-2 |
76.0.3809.100-1~deb10u1 |
chromium-browser-stableMageia:7 From an advisory covering 96 CVEs |
before 77.0.3865.75-1.mga7 | 77.0.3865.75-1.mga7 |
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 0:76.0.3809.87-1.el6_10 | 0:76.0.3809.87-1.el6_10 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 0:76.0.3809.87-1.el6_10 | 0:76.0.3809.87-1.el6_10 |
chromium-browserUbuntu:16.04:LTS |
before 76.0.3809.87-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
76.0.3809.87-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 76.0.3809.87-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 24 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.1 |
76.0.3809.87-0ubuntu0.18.04.1 |
chromiumopenSUSE:Leap 15.0 From an advisory covering 16 CVEs |
before 76.0.3809.87-lp150.224.1 | 76.0.3809.87-lp150.224.1 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumopenSUSE:Leap 15.1 From an advisory covering 16 CVEs |
before 76.0.3809.87-lp151.2.15.1 | 76.0.3809.87-lp151.2.15.1 |
chromiumSUSE:Package Hub 15 From an advisory covering 16 CVEs |
before 76.0.3809.87-bp150.220.1 | 76.0.3809.87-bp150.220.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 16 CVEs |
before 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 |
chromiumSUSE:Package Hub 12 SP3 From an advisory covering 86 CVEs |
before 78.0.3904.87-10.1 | 78.0.3904.87-10.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5861 is a medium vulnerability (CVSS 4.3) in Google Chrome, published August 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.64%, the 50th percentile. Fixed in chromium 76.0.3809.87-1.
References
chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html
crbug.com/951525
nvd.nist.gov/vuln/detail/CVE-2019-5861
github.com/advisories/GHSA-jr83-rwfm-7r6r
security-tracker.debian.org/tracker/CVE-2019-5861
advisories.mageia.org/MGASA-2019-0283.html
Show 194 moreShow less
bugs.mageia.org/show_bug.cgi?id=23558
chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html
chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html
chromereleases.googleblog.com/2019/05/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/05/stable-channel-update-for-desktop_21.html
chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop_13.html
chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop_18.html
chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop_26.html
chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html
access.redhat.com/errata/RHSA-2019:2427
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1735496
bugzilla.redhat.com/show_bug.cgi?id=1737721
bugzilla.redhat.com/show_bug.cgi?id=1737722
bugzilla.redhat.com/show_bug.cgi?id=1737723
bugzilla.redhat.com/show_bug.cgi?id=1737724
bugzilla.redhat.com/show_bug.cgi?id=1737725
bugzilla.redhat.com/show_bug.cgi?id=1737727
bugzilla.redhat.com/show_bug.cgi?id=1737729
bugzilla.redhat.com/show_bug.cgi?id=1737730
bugzilla.redhat.com/show_bug.cgi?id=1737731
bugzilla.redhat.com/show_bug.cgi?id=1737732
bugzilla.redhat.com/show_bug.cgi?id=1737733
bugzilla.redhat.com/show_bug.cgi?id=1737734
bugzilla.redhat.com/show_bug.cgi?id=1737735
bugzilla.redhat.com/show_bug.cgi?id=1737736
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2427.json
access.redhat.com/security/cve/CVE-2019-5850
cve.org/CVERecord?id=CVE-2019-5850
nvd.nist.gov/vuln/detail/CVE-2019-5850
access.redhat.com/security/cve/CVE-2019-5851
cve.org/CVERecord?id=CVE-2019-5851
nvd.nist.gov/vuln/detail/CVE-2019-5851
access.redhat.com/security/cve/CVE-2019-5852
cve.org/CVERecord?id=CVE-2019-5852
nvd.nist.gov/vuln/detail/CVE-2019-5852
access.redhat.com/security/cve/CVE-2019-5853
cve.org/CVERecord?id=CVE-2019-5853
nvd.nist.gov/vuln/detail/CVE-2019-5853
access.redhat.com/security/cve/CVE-2019-5854
cve.org/CVERecord?id=CVE-2019-5854
nvd.nist.gov/vuln/detail/CVE-2019-5854
access.redhat.com/security/cve/CVE-2019-5855
cve.org/CVERecord?id=CVE-2019-5855
nvd.nist.gov/vuln/detail/CVE-2019-5855
access.redhat.com/security/cve/CVE-2019-5856
cve.org/CVERecord?id=CVE-2019-5856
nvd.nist.gov/vuln/detail/CVE-2019-5856
access.redhat.com/security/cve/CVE-2019-5857
cve.org/CVERecord?id=CVE-2019-5857
nvd.nist.gov/vuln/detail/CVE-2019-5857
access.redhat.com/security/cve/CVE-2019-5858
cve.org/CVERecord?id=CVE-2019-5858
nvd.nist.gov/vuln/detail/CVE-2019-5858
access.redhat.com/security/cve/CVE-2019-5859
cve.org/CVERecord?id=CVE-2019-5859
nvd.nist.gov/vuln/detail/CVE-2019-5859
access.redhat.com/security/cve/CVE-2019-5860
cve.org/CVERecord?id=CVE-2019-5860
nvd.nist.gov/vuln/detail/CVE-2019-5860
access.redhat.com/security/cve/CVE-2019-5861
cve.org/CVERecord?id=CVE-2019-5861
access.redhat.com/security/cve/CVE-2019-5862
cve.org/CVERecord?id=CVE-2019-5862
nvd.nist.gov/vuln/detail/CVE-2019-5862
access.redhat.com/security/cve/CVE-2019-5864
cve.org/CVERecord?id=CVE-2019-5864
nvd.nist.gov/vuln/detail/CVE-2019-5864
access.redhat.com/security/cve/CVE-2019-5865
cve.org/CVERecord?id=CVE-2019-5865
nvd.nist.gov/vuln/detail/CVE-2019-5865
ubuntu.com/security/CVE-2019-5861
lists.opensuse.org/archives/list/[email protected]/thread/5SQB7KIIPJ3ISJV2K2MKGQ6C2QU57AC6
bugzilla.suse.com/1143492
bugzilla.suse.com/1144625
suse.com/security/cve/CVE-2019-5850
suse.com/security/cve/CVE-2019-5851
suse.com/security/cve/CVE-2019-5852
suse.com/security/cve/CVE-2019-5853
suse.com/security/cve/CVE-2019-5854
suse.com/security/cve/CVE-2019-5855
suse.com/security/cve/CVE-2019-5856
suse.com/security/cve/CVE-2019-5857
suse.com/security/cve/CVE-2019-5858
suse.com/security/cve/CVE-2019-5859
suse.com/security/cve/CVE-2019-5860
suse.com/security/cve/CVE-2019-5861
suse.com/security/cve/CVE-2019-5862
suse.com/security/cve/CVE-2019-5863
suse.com/security/cve/CVE-2019-5864
suse.com/security/cve/CVE-2019-5865
lists.opensuse.org/archives/list/[email protected]/thread/WQECSHEVYXDAI56ELOTP64T44DSAKEKK
lists.opensuse.org/archives/list/[email protected]/thread/JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA
lists.opensuse.org/archives/list/[email protected]/thread/XND555JZAYB5HDPOE4ZR2IPLHPN56QQ2
lists.opensuse.org/archives/list/[email protected]/thread/QNJAWHUQKXHQBG3I7GI4ACW3CYHDJAHM
bugzilla.suse.com/1145242
bugzilla.suse.com/1146219
bugzilla.suse.com/1149143
bugzilla.suse.com/1150425
bugzilla.suse.com/1151229
bugzilla.suse.com/1153660
bugzilla.suse.com/1154806
bugzilla.suse.com/1155643
suse.com/security/cve/CVE-2019-13659
suse.com/security/cve/CVE-2019-13660
suse.com/security/cve/CVE-2019-13661
suse.com/security/cve/CVE-2019-13662
suse.com/security/cve/CVE-2019-13663
suse.com/security/cve/CVE-2019-13664
suse.com/security/cve/CVE-2019-13665
suse.com/security/cve/CVE-2019-13666
suse.com/security/cve/CVE-2019-13667
suse.com/security/cve/CVE-2019-13668
suse.com/security/cve/CVE-2019-13669
suse.com/security/cve/CVE-2019-13670
suse.com/security/cve/CVE-2019-13671
suse.com/security/cve/CVE-2019-13673
suse.com/security/cve/CVE-2019-13674
suse.com/security/cve/CVE-2019-13675
suse.com/security/cve/CVE-2019-13676
suse.com/security/cve/CVE-2019-13677
suse.com/security/cve/CVE-2019-13678
suse.com/security/cve/CVE-2019-13679
suse.com/security/cve/CVE-2019-13680
suse.com/security/cve/CVE-2019-13681
suse.com/security/cve/CVE-2019-13682
suse.com/security/cve/CVE-2019-13683
suse.com/security/cve/CVE-2019-13685
suse.com/security/cve/CVE-2019-13686
suse.com/security/cve/CVE-2019-13687
suse.com/security/cve/CVE-2019-13688
suse.com/security/cve/CVE-2019-13693
suse.com/security/cve/CVE-2019-13694
suse.com/security/cve/CVE-2019-13695
suse.com/security/cve/CVE-2019-13696
suse.com/security/cve/CVE-2019-13697
suse.com/security/cve/CVE-2019-13699
suse.com/security/cve/CVE-2019-13700
suse.com/security/cve/CVE-2019-13701
suse.com/security/cve/CVE-2019-13702
suse.com/security/cve/CVE-2019-13703
suse.com/security/cve/CVE-2019-13704
suse.com/security/cve/CVE-2019-13705
suse.com/security/cve/CVE-2019-13706
suse.com/security/cve/CVE-2019-13707
suse.com/security/cve/CVE-2019-13708
suse.com/security/cve/CVE-2019-13709
suse.com/security/cve/CVE-2019-13710
suse.com/security/cve/CVE-2019-13711
suse.com/security/cve/CVE-2019-13713
suse.com/security/cve/CVE-2019-13714
suse.com/security/cve/CVE-2019-13715
suse.com/security/cve/CVE-2019-13716
suse.com/security/cve/CVE-2019-13717
suse.com/security/cve/CVE-2019-13718
suse.com/security/cve/CVE-2019-13719
suse.com/security/cve/CVE-2019-13720
suse.com/security/cve/CVE-2019-13721
suse.com/security/cve/CVE-2019-15903
suse.com/security/cve/CVE-2019-5867
suse.com/security/cve/CVE-2019-5868
suse.com/security/cve/CVE-2019-5869
suse.com/security/cve/CVE-2019-5870
suse.com/security/cve/CVE-2019-5871
suse.com/security/cve/CVE-2019-5872
suse.com/security/cve/CVE-2019-5874
suse.com/security/cve/CVE-2019-5875
suse.com/security/cve/CVE-2019-5876
suse.com/security/cve/CVE-2019-5877
suse.com/security/cve/CVE-2019-5878
suse.com/security/cve/CVE-2019-5879
suse.com/security/cve/CVE-2019-5880
suse.com/security/cve/CVE-2019-5881
suse.com/security/cve/CVE-2017-11215
suse.com/security/cve/CVE-2017-11225
suse.com/security/cve/CVE-2017-15386
suse.com/security/cve/CVE-2017-15387
suse.com/security/cve/CVE-2017-15388
suse.com/security/cve/CVE-2017-15389
suse.com/security/cve/CVE-2017-15390
suse.com/security/cve/CVE-2017-15391
suse.com/security/cve/CVE-2017-15392
suse.com/security/cve/CVE-2017-15393
suse.com/security/cve/CVE-2017-15394
suse.com/security/cve/CVE-2017-15395
suse.com/security/cve/CVE-2017-15396
suse.com/security/cve/CVE-2017-15398
suse.com/security/cve/CVE-2017-15399
suse.com/security/cve/CVE-2017-15407
suse.com/security/cve/CVE-2017-15408
suse.com/security/cve/CVE-2017-15409
Left out here: 2,206 references and the rest of 1 source description. The JSON record has them.