CVE-2019-5864
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker...
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
4.3
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
CVE-2019-5864- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-20, CWE-863
- Updated
- 2026-11-02
CVE List No score
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
CVE-2019-5864- Updated
- 2026-11-02
EUVDEUVD-2019-15435 No score
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
EUVD-2019-15435- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rqw3-7f5v-7r6j No score
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker...
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
GHSA-rqw3-7f5v-7r6j- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
4.3
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
CVE-2019-5864- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-5864
4.3
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
DEBIAN-CVE-2019-5864- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2019:2427
8.8
Red Hat Security Advisory: chromium-browser security update
- Record
RHSA-2019:2427- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-5864
4.3
Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
- Record
UBUNTU-CVE-2019-5864- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0283 No score
Updated chromium-browser-stable packages fix security vulnerabilities
Multiple flaws were found in the way Chromium 73.0.3683.103 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-5805, CVE-2019-5806, CVE-2019-5807, CVE-2019-5808, CVE-2019-5809, CVE-2019-5810, CVE-2019-5811, CVE-2019-5812, CVE-2019-5813, CVE-2019-5814, CVE-2019-5815, CVE-2019-5816, CVE-2019-5817, CVE-2019-5818, CVE-2019-5819, CVE-2019-5820, CVE-2019-5821, CVE-2019-5822, CVE-2019-5823, CVE-2019-5824, CVE-2019-5825, CVE-2019-5826, CVE-2019-5827, CVE-2019-5828, CVE-2019-5829, CVE-2019-5830, CVE-2019-5831, CVE-2019-5832, CVE-2019-5833, CVE-2019-5834, CVE-2019-5835, CVE-2019-5836, CVE-2019-5837, CVE-2019-5838, CVE-2019-5839, CVE-2019-5840, CVE-2019-5842, CVE-2019-5847, CVE-2019-5848, CVE-2019-5849, CVE-2019-5850, CVE-2019-5851, CVE-2019-5852, CVE-2019-5853, CVE-2019-5854, CVE-2019-5855, CVE-2019-5856, CVE-2019-5857, CVE-2019-5858, CVE-2019-5859, CVE-2019-5860, CVE-2019-5861, CVE-2019-5862, CVE-2019-5863, CVE-2019-5864, CVE-2019-5865, CVE-2019-5866, CVE-2019-5867, CVE-2019-5868, CVE-2019-5869, CVE-2019-5870, CVE-2019-5871, CVE-2019-5872, CVE-2019-5873, CVE-2019-5874, CVE-2019-5875, CVE-2019-5876, CVE-2019-5877, CVE-2019-5878, CVE-2019-5879, CVE-2019-5880, CVE-2019-5881, CVE-2019-13659, CVE-2019-13660, CVE-2019-13661, CVE-2019-13662, CVE-2019-13663, CVE-2019-13664, CVE-2019-13665, CVE-2019-13666, CVE-2019-13667, CVE-2019-13668, CVE-2019-13669, CVE-2019-13670, CVE-2019-13671, CVE-2019-13673, CVE-2019-13674, CVE-2019-13675, CVE-2019-13676, CVE-2019-13677, CVE-2019-13678, CVE-2019-13679, CVE-2019-13680, CVE-2019-13681, CVE-2019-13682, CVE-2019-13683)
- Record
MGASA-2019-0283- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1848-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
- Record
openSUSE-SU-2019:1848-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1849-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
- Record
openSUSE-SU-2019:1849-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1853-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:1853-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1901-1 No score
Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues:
- CVE-2019-5850: Use-after-free in offline page fetcher (boo#1143492)
- CVE-2019-5860: Use-after-free in PDFium (boo#1143492)
- CVE-2019-5853: Memory corruption in regexp length check (boo#1143492)
- CVE-2019-5851: Use-after-poison in offline audio context (boo#1143492)
- CVE-2019-5859: res: URIs can load alternative browsers (boo#1143492)
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions (boo#1143492)
- CVE-2019-5855: Integer overflow in PDFium (boo#1143492)
- CVE-2019-5865: Site isolation bypass from compromised renderer (boo#1143492)
- CVE-2019-5858: Insufficient filtering of Open URL service parameters (boo#1143492)
- CVE-2019-5864: Insufficient port filtering in CORS for extensions (boo#1143492)
- CVE-2019-5862: AppCache not robust to compromised renderers (boo#1143492)
- CVE-2019-5861: Click location incorrectly checked (boo#1143492)
- CVE-2019-5857: Comparison of -0 and null yields crash (boo#1143492)
- CVE-2019-5854: Integer overflow in PDFium text rendering (boo#1143492)
- CVE-2019-5852: Object leak of utility functions (boo#1143492)
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2019:1901-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2447-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492)
Security issues fixed with this version update:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- CVE-2019-13693: Use-after-free in IndexedDB
- CVE-2019-13694: Use-after-free in WebRTC
- CVE-2019-13695: Use-after-free in audio
- CVE-2019-13696: Use-after-free in V8
- CVE-2019-13697: Cross-origin size leak.
- CVE-2019-13685: Use-after-free in UI
- CVE-2019-13688: Use-after-free in media
- CVE-2019-13687: Use-after-free in media
- CVE-2019-13686: Use-after-free in offline pages
- CVE-2019-5870: Use-after-free in media
- CVE-2019-5871: Heap overflow in Skia
- CVE-2019-5872: Use-after-free in Mojo
- CVE-2019-5874: External URIs may trigger other browsers
- CVE-2019-5875: URL bar spoof via download redirect
- CVE-2019-5876: Use-after-free in media
- CVE-2019-5877: Out-of-bounds access in V8
- CVE-2019-5878: Use-after-free in V8
- CVE-2019-5879: Extension can bypass same origin policy
- CVE-2019-5880: SameSite cookie bypass
- CVE-2019-5881: Arbitrary read in SwiftShader
- CVE-2019-13659: URL spoof
- CVE-2019-13660: Full screen notification overlap
- CVE-2019-13661: Full screen notification spoof
- CVE-2019-13662: CSP bypass
- CVE-2019-13663: IDN spoof
- CVE-2019-13664: CSRF bypass
- CVE-2019-13665: Multiple file download protection bypass
- CVE-2019-13666: Side channel using storage size estimate
- CVE-2019-13667: URI bar spoof when using external app URIs
- CVE-2019-13668: Global window leak via console
- CVE-2019-13669: HTTP authentication spoof
- CVE-2019-13670: V8 memory corruption in regex
- CVE-2019-13671: Dialog box fails to show origin
- CVE-2019-13673: Cross-origin information leak using devtools
- CVE-2019-13674: IDN spoofing
- CVE-2019-13675: Extensions can be disabled by trailing slash
- CVE-2019-13676: Google URI shown for certificate warning
- CVE-2019-13677: Chrome web store origin needs to be isolated
- CVE-2019-13678: Download dialog spoofing
- CVE-2019-13679: User gesture needed for printing
- CVE-2019-13680: IP address spoofing to servers
- CVE-2019-13681: Bypass on download restrictions
- CVE-2019-13682: Site isolation bypass
- CVE-2019-13683: Exceptions leaked by devtools
- CVE-2019-5869: Use-after-free in Blink
- CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
- CVE-2019-5867: Out-of-bounds read in V8
- CVE-2019-5850: Use-after-free in offline page fetcher
- CVE-2019-5860: Use-after-free in PDFium
- CVE-2019-5853: Memory corruption in regexp length check
- CVE-2019-5851: Use-after-poison in offline audio context
- CVE-2019-5859: res: URIs can load alternative browsers
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions
- CVE-2019-5855: Integer overflow in PDFium
- CVE-2019-5865: Site isolation bypass from compromised renderer
- CVE-2019-5858:…
- Record
openSUSE-SU-2019:2447-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 76.0.3809.87-1 | 76.0.3809.87-1 |
chromiumDebian:13 |
before 76.0.3809.87-1 | 76.0.3809.87-1 |
chromiumDebian:14 |
before 76.0.3809.87-1 | 76.0.3809.87-1 |
chromiumDebian:10 From an advisory covering 58 CVEs |
before 76.0.3809.100-1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 4 moreShow less76.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-2 |
76.0.3809.100-1~deb10u1 |
chromium-browser-stableMageia:7 From an advisory covering 96 CVEs |
before 77.0.3865.75-1.mga7 | 77.0.3865.75-1.mga7 |
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 0:76.0.3809.87-1.el6_10 | 0:76.0.3809.87-1.el6_10 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 0:76.0.3809.87-1.el6_10 | 0:76.0.3809.87-1.el6_10 |
chromium-browserUbuntu:16.04:LTS |
before 76.0.3809.87-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
76.0.3809.87-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 76.0.3809.87-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 24 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.1 |
76.0.3809.87-0ubuntu0.18.04.1 |
chromiumopenSUSE:Leap 15.0 From an advisory covering 16 CVEs |
before 76.0.3809.87-lp150.224.1 | 76.0.3809.87-lp150.224.1 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumopenSUSE:Leap 15.1 From an advisory covering 16 CVEs |
before 76.0.3809.87-lp151.2.15.1 | 76.0.3809.87-lp151.2.15.1 |
chromiumSUSE:Package Hub 15 From an advisory covering 16 CVEs |
before 76.0.3809.87-bp150.220.1 | 76.0.3809.87-bp150.220.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 16 CVEs |
before 76.0.3809.87-bp151.3.3.3 | 76.0.3809.87-bp151.3.3.3 |
chromiumSUSE:Package Hub 12 SP3 From an advisory covering 86 CVEs |
before 78.0.3904.87-10.1 | 78.0.3904.87-10.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5864 is a medium vulnerability (CVSS 4.3) in Google Chrome, published August 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in chromium 76.0.3809.87-1.
References
chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html
crbug.com/936900
nvd.nist.gov/vuln/detail/CVE-2019-5864
github.com/advisories/GHSA-rqw3-7f5v-7r6j
security-tracker.debian.org/tracker/CVE-2019-5864
advisories.mageia.org/MGASA-2019-0283.html
Show 194 moreShow less
bugs.mageia.org/show_bug.cgi?id=23558
chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html
chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_30.html
chromereleases.googleblog.com/2019/05/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/05/stable-channel-update-for-desktop_21.html
chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop_13.html
chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop_18.html
chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop.html
chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop_26.html
chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html
access.redhat.com/errata/RHSA-2019:2427
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1735496
bugzilla.redhat.com/show_bug.cgi?id=1737721
bugzilla.redhat.com/show_bug.cgi?id=1737722
bugzilla.redhat.com/show_bug.cgi?id=1737723
bugzilla.redhat.com/show_bug.cgi?id=1737724
bugzilla.redhat.com/show_bug.cgi?id=1737725
bugzilla.redhat.com/show_bug.cgi?id=1737727
bugzilla.redhat.com/show_bug.cgi?id=1737729
bugzilla.redhat.com/show_bug.cgi?id=1737730
bugzilla.redhat.com/show_bug.cgi?id=1737731
bugzilla.redhat.com/show_bug.cgi?id=1737732
bugzilla.redhat.com/show_bug.cgi?id=1737733
bugzilla.redhat.com/show_bug.cgi?id=1737734
bugzilla.redhat.com/show_bug.cgi?id=1737735
bugzilla.redhat.com/show_bug.cgi?id=1737736
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2427.json
access.redhat.com/security/cve/CVE-2019-5850
cve.org/CVERecord?id=CVE-2019-5850
nvd.nist.gov/vuln/detail/CVE-2019-5850
access.redhat.com/security/cve/CVE-2019-5851
cve.org/CVERecord?id=CVE-2019-5851
nvd.nist.gov/vuln/detail/CVE-2019-5851
access.redhat.com/security/cve/CVE-2019-5852
cve.org/CVERecord?id=CVE-2019-5852
nvd.nist.gov/vuln/detail/CVE-2019-5852
access.redhat.com/security/cve/CVE-2019-5853
cve.org/CVERecord?id=CVE-2019-5853
nvd.nist.gov/vuln/detail/CVE-2019-5853
access.redhat.com/security/cve/CVE-2019-5854
cve.org/CVERecord?id=CVE-2019-5854
nvd.nist.gov/vuln/detail/CVE-2019-5854
access.redhat.com/security/cve/CVE-2019-5855
cve.org/CVERecord?id=CVE-2019-5855
nvd.nist.gov/vuln/detail/CVE-2019-5855
access.redhat.com/security/cve/CVE-2019-5856
cve.org/CVERecord?id=CVE-2019-5856
nvd.nist.gov/vuln/detail/CVE-2019-5856
access.redhat.com/security/cve/CVE-2019-5857
cve.org/CVERecord?id=CVE-2019-5857
nvd.nist.gov/vuln/detail/CVE-2019-5857
access.redhat.com/security/cve/CVE-2019-5858
cve.org/CVERecord?id=CVE-2019-5858
nvd.nist.gov/vuln/detail/CVE-2019-5858
access.redhat.com/security/cve/CVE-2019-5859
cve.org/CVERecord?id=CVE-2019-5859
nvd.nist.gov/vuln/detail/CVE-2019-5859
access.redhat.com/security/cve/CVE-2019-5860
cve.org/CVERecord?id=CVE-2019-5860
nvd.nist.gov/vuln/detail/CVE-2019-5860
access.redhat.com/security/cve/CVE-2019-5861
cve.org/CVERecord?id=CVE-2019-5861
nvd.nist.gov/vuln/detail/CVE-2019-5861
access.redhat.com/security/cve/CVE-2019-5862
cve.org/CVERecord?id=CVE-2019-5862
nvd.nist.gov/vuln/detail/CVE-2019-5862
access.redhat.com/security/cve/CVE-2019-5864
cve.org/CVERecord?id=CVE-2019-5864
access.redhat.com/security/cve/CVE-2019-5865
cve.org/CVERecord?id=CVE-2019-5865
nvd.nist.gov/vuln/detail/CVE-2019-5865
ubuntu.com/security/CVE-2019-5864
lists.opensuse.org/archives/list/[email protected]/thread/5SQB7KIIPJ3ISJV2K2MKGQ6C2QU57AC6
bugzilla.suse.com/1143492
bugzilla.suse.com/1144625
suse.com/security/cve/CVE-2019-5850
suse.com/security/cve/CVE-2019-5851
suse.com/security/cve/CVE-2019-5852
suse.com/security/cve/CVE-2019-5853
suse.com/security/cve/CVE-2019-5854
suse.com/security/cve/CVE-2019-5855
suse.com/security/cve/CVE-2019-5856
suse.com/security/cve/CVE-2019-5857
suse.com/security/cve/CVE-2019-5858
suse.com/security/cve/CVE-2019-5859
suse.com/security/cve/CVE-2019-5860
suse.com/security/cve/CVE-2019-5861
suse.com/security/cve/CVE-2019-5862
suse.com/security/cve/CVE-2019-5863
suse.com/security/cve/CVE-2019-5864
suse.com/security/cve/CVE-2019-5865
lists.opensuse.org/archives/list/[email protected]/thread/WQECSHEVYXDAI56ELOTP64T44DSAKEKK
lists.opensuse.org/archives/list/[email protected]/thread/JMMJLYJITAKUCHBOHB7CNHLZRBB3RITA
lists.opensuse.org/archives/list/[email protected]/thread/XND555JZAYB5HDPOE4ZR2IPLHPN56QQ2
lists.opensuse.org/archives/list/[email protected]/thread/QNJAWHUQKXHQBG3I7GI4ACW3CYHDJAHM
bugzilla.suse.com/1145242
bugzilla.suse.com/1146219
bugzilla.suse.com/1149143
bugzilla.suse.com/1150425
bugzilla.suse.com/1151229
bugzilla.suse.com/1153660
bugzilla.suse.com/1154806
bugzilla.suse.com/1155643
suse.com/security/cve/CVE-2019-13659
suse.com/security/cve/CVE-2019-13660
suse.com/security/cve/CVE-2019-13661
suse.com/security/cve/CVE-2019-13662
suse.com/security/cve/CVE-2019-13663
suse.com/security/cve/CVE-2019-13664
suse.com/security/cve/CVE-2019-13665
suse.com/security/cve/CVE-2019-13666
suse.com/security/cve/CVE-2019-13667
suse.com/security/cve/CVE-2019-13668
suse.com/security/cve/CVE-2019-13669
suse.com/security/cve/CVE-2019-13670
suse.com/security/cve/CVE-2019-13671
suse.com/security/cve/CVE-2019-13673
suse.com/security/cve/CVE-2019-13674
suse.com/security/cve/CVE-2019-13675
suse.com/security/cve/CVE-2019-13676
suse.com/security/cve/CVE-2019-13677
suse.com/security/cve/CVE-2019-13678
suse.com/security/cve/CVE-2019-13679
suse.com/security/cve/CVE-2019-13680
suse.com/security/cve/CVE-2019-13681
suse.com/security/cve/CVE-2019-13682
suse.com/security/cve/CVE-2019-13683
suse.com/security/cve/CVE-2019-13685
suse.com/security/cve/CVE-2019-13686
suse.com/security/cve/CVE-2019-13687
suse.com/security/cve/CVE-2019-13688
suse.com/security/cve/CVE-2019-13693
suse.com/security/cve/CVE-2019-13694
suse.com/security/cve/CVE-2019-13695
suse.com/security/cve/CVE-2019-13696
suse.com/security/cve/CVE-2019-13697
suse.com/security/cve/CVE-2019-13699
suse.com/security/cve/CVE-2019-13700
suse.com/security/cve/CVE-2019-13701
suse.com/security/cve/CVE-2019-13702
suse.com/security/cve/CVE-2019-13703
suse.com/security/cve/CVE-2019-13704
suse.com/security/cve/CVE-2019-13705
suse.com/security/cve/CVE-2019-13706
suse.com/security/cve/CVE-2019-13707
suse.com/security/cve/CVE-2019-13708
suse.com/security/cve/CVE-2019-13709
suse.com/security/cve/CVE-2019-13710
suse.com/security/cve/CVE-2019-13711
suse.com/security/cve/CVE-2019-13713
suse.com/security/cve/CVE-2019-13714
suse.com/security/cve/CVE-2019-13715
suse.com/security/cve/CVE-2019-13716
suse.com/security/cve/CVE-2019-13717
suse.com/security/cve/CVE-2019-13718
suse.com/security/cve/CVE-2019-13719
suse.com/security/cve/CVE-2019-13720
suse.com/security/cve/CVE-2019-13721
suse.com/security/cve/CVE-2019-15903
suse.com/security/cve/CVE-2019-5867
suse.com/security/cve/CVE-2019-5868
suse.com/security/cve/CVE-2019-5869
suse.com/security/cve/CVE-2019-5870
suse.com/security/cve/CVE-2019-5871
suse.com/security/cve/CVE-2019-5872
suse.com/security/cve/CVE-2019-5874
suse.com/security/cve/CVE-2019-5875
suse.com/security/cve/CVE-2019-5876
suse.com/security/cve/CVE-2019-5877
suse.com/security/cve/CVE-2019-5878
suse.com/security/cve/CVE-2019-5879
suse.com/security/cve/CVE-2019-5880
suse.com/security/cve/CVE-2019-5881
suse.com/security/cve/CVE-2017-11215
suse.com/security/cve/CVE-2017-11225
suse.com/security/cve/CVE-2017-15386
suse.com/security/cve/CVE-2017-15387
suse.com/security/cve/CVE-2017-15388
suse.com/security/cve/CVE-2017-15389
suse.com/security/cve/CVE-2017-15390
suse.com/security/cve/CVE-2017-15391
suse.com/security/cve/CVE-2017-15392
suse.com/security/cve/CVE-2017-15393
suse.com/security/cve/CVE-2017-15394
suse.com/security/cve/CVE-2017-15395
suse.com/security/cve/CVE-2017-15396
suse.com/security/cve/CVE-2017-15398
suse.com/security/cve/CVE-2017-15399
suse.com/security/cve/CVE-2017-15407
suse.com/security/cve/CVE-2017-15408
suse.com/security/cve/CVE-2017-15409
Left out here: 2,206 references and the rest of 1 source description. The JSON record has them.