Every CVE Search/ Get API key

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an...

6.5 MediumFix available

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.59%Up 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Record
CVE-2019-5879
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
CVE List No score

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Record
CVE-2019-5879
Updated
2026-11-02
EUVDEUVD-2019-15450 No score

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Record
EUVD-2019-15450
Updated
2026-11-03
GitHub AdvisoriesGHSA-hcrx-7wpm-hhwq No score

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an...

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.

Record
GHSA-hcrx-7wpm-hhwq
Weakness
CWE-20, CWE-863
Updated
2026-11-02
OSV 6.5

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Record
CVE-2019-5879
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2019-5879 6.5

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Record
DEBIAN-CVE-2019-5879
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2019:3211 9.6

Red Hat Security Advisory: chromium-browser security update

Record
RHSA-2019:3211
CVSS 3.0
9.6 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-5879 6.5

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Record
UBUNTU-CVE-2019-5879
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2019-0283 No score

Updated chromium-browser-stable packages fix security vulnerabilities

Multiple flaws were found in the way Chromium 73.0.3683.103 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-5805, CVE-2019-5806, CVE-2019-5807, CVE-2019-5808, CVE-2019-5809, CVE-2019-5810, CVE-2019-5811, CVE-2019-5812, CVE-2019-5813, CVE-2019-5814, CVE-2019-5815, CVE-2019-5816, CVE-2019-5817, CVE-2019-5818, CVE-2019-5819, CVE-2019-5820, CVE-2019-5821, CVE-2019-5822, CVE-2019-5823, CVE-2019-5824, CVE-2019-5825, CVE-2019-5826, CVE-2019-5827, CVE-2019-5828, CVE-2019-5829, CVE-2019-5830, CVE-2019-5831, CVE-2019-5832, CVE-2019-5833, CVE-2019-5834, CVE-2019-5835, CVE-2019-5836, CVE-2019-5837, CVE-2019-5838, CVE-2019-5839, CVE-2019-5840, CVE-2019-5842, CVE-2019-5847, CVE-2019-5848, CVE-2019-5849, CVE-2019-5850, CVE-2019-5851, CVE-2019-5852, CVE-2019-5853, CVE-2019-5854, CVE-2019-5855, CVE-2019-5856, CVE-2019-5857, CVE-2019-5858, CVE-2019-5859, CVE-2019-5860, CVE-2019-5861, CVE-2019-5862, CVE-2019-5863, CVE-2019-5864, CVE-2019-5865, CVE-2019-5866, CVE-2019-5867, CVE-2019-5868, CVE-2019-5869, CVE-2019-5870, CVE-2019-5871, CVE-2019-5872, CVE-2019-5873, CVE-2019-5874, CVE-2019-5875, CVE-2019-5876, CVE-2019-5877, CVE-2019-5878, CVE-2019-5879, CVE-2019-5880, CVE-2019-5881, CVE-2019-13659, CVE-2019-13660, CVE-2019-13661, CVE-2019-13662, CVE-2019-13663, CVE-2019-13664, CVE-2019-13665, CVE-2019-13666, CVE-2019-13667, CVE-2019-13668, CVE-2019-13669, CVE-2019-13670, CVE-2019-13671, CVE-2019-13673, CVE-2019-13674, CVE-2019-13675, CVE-2019-13676, CVE-2019-13677, CVE-2019-13678, CVE-2019-13679, CVE-2019-13680, CVE-2019-13681, CVE-2019-13682, CVE-2019-13683)

Record
MGASA-2019-0283
Updated
2026-11-02
OSVopenSUSE-SU-2019:2152-1 No score

Security update for chromium

This update for chromium to 77.0.3865.75 fixes the following issues:

Security issues fixed:

  • CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425)
  • CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425)
  • CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425)
  • CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425)
  • CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425)
  • CVE-2019-5876: Fixed a use-after-free in media (boo#1150425)
  • CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425)
  • CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425)
  • CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425)
  • CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425)
  • CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425)
  • CVE-2019-13659: Fixed an URL spoof. (boo#1150425)
  • CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425)
  • CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425)
  • CVE-2019-13662: Fixed a CSP bypass. (boo#1150425)
  • CVE-2019-13663: Fixed an IDN spoof. (boo#1150425)
  • CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425)
  • CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425)
  • CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425)
  • CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425)
  • CVE-2019-13668: Fixed a global window leak via console. (boo#1150425)
  • CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425)
  • CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425)
  • CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425)
  • CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425)
  • CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425)
  • CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425)
  • CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425)
  • CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425)
  • CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425)
  • CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425)
  • CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425)
  • CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425)
  • CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425)
  • CVE-2019-13683: Fixed an exceptions leaked by devtools. (boo#1150425)
Record
openSUSE-SU-2019:2152-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2153-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Security issues fixed:

  • CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425)
  • CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425)
  • CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425)
  • CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425)
  • CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425)
  • CVE-2019-5876: Fixed a use-after-free in media (boo#1150425)
  • CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425)
  • CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425)
  • CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425)
  • CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425)
  • CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425)
  • CVE-2019-13659: Fixed an URL spoof. (boo#1150425)
  • CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425)
  • CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425)
  • CVE-2019-13662: Fixed a CSP bypass. (boo#1150425)
  • CVE-2019-13663: Fixed an IDN spoof. (boo#1150425)
  • CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425)
  • CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425)
  • CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425)
  • CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425)
  • CVE-2019-13668: Fixed a global window leak via console. (boo#1150425)
  • CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425)
  • CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425)
  • CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425)
  • CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425)
  • CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425)
  • CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425)
  • CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425)
  • CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425)
  • CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425)
  • CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425)
  • CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425)
  • CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425)
  • CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425)
  • CVE-2019-13683: Fixed an exception leaked by devtools. (boo#1150425)
Record
openSUSE-SU-2019:2153-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2155-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Security issues fixed:

  • CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425)
  • CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425)
  • CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425)
  • CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425)
  • CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425)
  • CVE-2019-5876: Fixed a use-after-free in media (boo#1150425)
  • CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425)
  • CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425)
  • CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425)
  • CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425)
  • CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425)
  • CVE-2019-13659: Fixed an URL spoof. (boo#1150425)
  • CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425)
  • CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425)
  • CVE-2019-13662: Fixed a CSP bypass. (boo#1150425)
  • CVE-2019-13663: Fixed an IDN spoof. (boo#1150425)
  • CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425)
  • CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425)
  • CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425)
  • CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425)
  • CVE-2019-13668: Fixed a global window leak via console. (boo#1150425)
  • CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425)
  • CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425)
  • CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425)
  • CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425)
  • CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425)
  • CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425)
  • CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425)
  • CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425)
  • CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425)
  • CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425)
  • CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425)
  • CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425)
  • CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425)
  • CVE-2019-13683: Fixed an exception leaked by devtools. (boo#1150425)

This update was imported from the openSUSE:Leap:15.0:Update update project.

Record
openSUSE-SU-2019:2155-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2156-1 No score

Security update for chromium

This update for chromium to 77.0.3865.75 fixes the following issues:

Security issues fixed:

  • CVE-2019-5870: Fixed a use-after-free in media. (boo#1150425)
  • CVE-2019-5871: Fixed a heap overflow in Skia. (boo#1150425)
  • CVE-2019-5872: Fixed a use-after-free in Mojo (boo#1150425)
  • CVE-2019-5874: Fixed a behavior that made external URIs trigger other browsers. (boo#1150425)
  • CVE-2019-5875: Fixed a URL bar spoof via download redirect. (boo#1150425)
  • CVE-2019-5876: Fixed a use-after-free in media (boo#1150425)
  • CVE-2019-5877: Fixed an out-of-bounds access in V8. (boo#1150425)
  • CVE-2019-5878: Fixed a use-after-free in V8. (boo#1150425)
  • CVE-2019-5879: Fixed an extension issue that allowed the bypass of a same origin policy. (boo#1150425)
  • CVE-2019-5880: Fixed a SameSite cookie bypass. (boo#1150425)
  • CVE-2019-5881: Fixed an arbitrary read in SwiftShader. (boo#1150425)
  • CVE-2019-13659: Fixed an URL spoof. (boo#1150425)
  • CVE-2019-13660: Fixed a full screen notification overlap. (boo#1150425)
  • CVE-2019-13661: Fixed a full screen notification spoof. (boo#1150425)
  • CVE-2019-13662: Fixed a CSP bypass. (boo#1150425)
  • CVE-2019-13663: Fixed an IDN spoof. (boo#1150425)
  • CVE-2019-13664: Fixed a CSRF bypass. (boo#1150425)
  • CVE-2019-13665: Fixed a multiple file download protection bypass. (boo#1150425)
  • CVE-2019-13666: Fixed a side channel weakness using storage size estimate. (boo#1150425)
  • CVE-2019-13667: Fixed a URI bar spoof when using external app URIs. (boo#1150425)
  • CVE-2019-13668: Fixed a global window leak via console. (boo#1150425)
  • CVE-2019-13669: Fixed an HTTP authentication spoof. (boo#1150425)
  • CVE-2019-13670: Fixed a V8 memory corruption in regex. (boo#1150425)
  • CVE-2019-13671: Fixed a dialog box that failed to show the origin. (boo#1150425)
  • CVE-2019-13673: Fixed a cross-origin information leak using devtools. (boo#1150425)
  • CVE-2019-13674: Fixed an IDN spoofing opportunity. (boo#1150425)
  • CVE-2019-13675: Fixed an error that allowed extensions to be disabled by trailing slash. (boo#1150425)
  • CVE-2019-13676: Fixed a mistakenly shown Google URI in certificate warnings. (boo#1150425)
  • CVE-2019-13677: Fixed a lack of isolation in Chrome web store origin. (boo#1150425)
  • CVE-2019-13678: Fixed a download dialog spoofing opportunity. (boo#1150425)
  • CVE-2019-13679: Fixed a the necessity of a user gesture for printing. (boo#1150425)
  • CVE-2019-13680: Fixed an IP address spoofing error. (boo#1150425)
  • CVE-2019-13681: Fixed a bypass on download restrictions. (boo#1150425)
  • CVE-2019-13682: Fixed a site isolation bypass. (boo#1150425)
  • CVE-2019-13683: Fixed an exceptions leaked by devtools. (boo#1150425)

This update was imported from the openSUSE:Leap:15.1:Update update project.

Record
openSUSE-SU-2019:2156-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2447-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492)

Security issues fixed with this version update:

  • CVE-2019-13721: Use-after-free in PDFium
  • CVE-2019-13720: Use-after-free in audio
  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • CVE-2019-13693: Use-after-free in IndexedDB
  • CVE-2019-13694: Use-after-free in WebRTC
  • CVE-2019-13695: Use-after-free in audio
  • CVE-2019-13696: Use-after-free in V8
  • CVE-2019-13697: Cross-origin size leak.
  • CVE-2019-13685: Use-after-free in UI
  • CVE-2019-13688: Use-after-free in media
  • CVE-2019-13687: Use-after-free in media
  • CVE-2019-13686: Use-after-free in offline pages
  • CVE-2019-5870: Use-after-free in media
  • CVE-2019-5871: Heap overflow in Skia
  • CVE-2019-5872: Use-after-free in Mojo
  • CVE-2019-5874: External URIs may trigger other browsers
  • CVE-2019-5875: URL bar spoof via download redirect
  • CVE-2019-5876: Use-after-free in media
  • CVE-2019-5877: Out-of-bounds access in V8
  • CVE-2019-5878: Use-after-free in V8
  • CVE-2019-5879: Extension can bypass same origin policy
  • CVE-2019-5880: SameSite cookie bypass
  • CVE-2019-5881: Arbitrary read in SwiftShader
  • CVE-2019-13659: URL spoof
  • CVE-2019-13660: Full screen notification overlap
  • CVE-2019-13661: Full screen notification spoof
  • CVE-2019-13662: CSP bypass
  • CVE-2019-13663: IDN spoof
  • CVE-2019-13664: CSRF bypass
  • CVE-2019-13665: Multiple file download protection bypass
  • CVE-2019-13666: Side channel using storage size estimate
  • CVE-2019-13667: URI bar spoof when using external app URIs
  • CVE-2019-13668: Global window leak via console
  • CVE-2019-13669: HTTP authentication spoof
  • CVE-2019-13670: V8 memory corruption in regex
  • CVE-2019-13671: Dialog box fails to show origin
  • CVE-2019-13673: Cross-origin information leak using devtools
  • CVE-2019-13674: IDN spoofing
  • CVE-2019-13675: Extensions can be disabled by trailing slash
  • CVE-2019-13676: Google URI shown for certificate warning
  • CVE-2019-13677: Chrome web store origin needs to be isolated
  • CVE-2019-13678: Download dialog spoofing
  • CVE-2019-13679: User gesture needed for printing
  • CVE-2019-13680: IP address spoofing to servers
  • CVE-2019-13681: Bypass on download restrictions
  • CVE-2019-13682: Site isolation bypass
  • CVE-2019-13683: Exceptions leaked by devtools
  • CVE-2019-5869: Use-after-free in Blink
  • CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  • CVE-2019-5867: Out-of-bounds read in V8
  • CVE-2019-5850: Use-after-free in offline page fetcher
  • CVE-2019-5860: Use-after-free in PDFium
  • CVE-2019-5853: Memory corruption in regexp length check
  • CVE-2019-5851: Use-after-poison in offline audio context
  • CVE-2019-5859: res: URIs can load alternative browsers
  • CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  • CVE-2019-5855: Integer overflow in PDFium
  • CVE-2019-5865: Site isolation bypass from compromised renderer
  • CVE-2019-5858:…
Record
openSUSE-SU-2019:2447-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 78.0.3904.87-1
78.0.3904.87-1
chromium
Debian:13
 before 78.0.3904.87-1
78.0.3904.87-1
chromium
Debian:14
 before 78.0.3904.87-1
78.0.3904.87-1
chromium
Debian:10
From an advisory covering 71 CVEs
 before 78.0.3904.97-1~deb10u1, plus listed versions
73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1
Show 7 moreShow less
76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.87-1
78.0.3904.97-1~deb10u1
chromium-browser-stable
Mageia:7
From an advisory covering 96 CVEs
 before 77.0.3865.75-1.mga7
77.0.3865.75-1.mga7
chromium-browser
Red Hat:rhel_extras:6
From an advisory covering 46 CVEs
 before 0:77.0.3865.120-2.el6_10
0:77.0.3865.120-2.el6_10
chromium-browser-debuginfo
Red Hat:rhel_extras:6
From an advisory covering 46 CVEs
 before 0:77.0.3865.120-2.el6_10
0:77.0.3865.120-2.el6_10
chromium-browser
Ubuntu:16.04:LTS
 before 77.0.3865.90-0ubuntu0.16.04.1, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 45 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1
77.0.3865.90-0ubuntu0.16.04.1
chromium-browser
Ubuntu:18.04:LTS
 before 77.0.3865.90-0ubuntu0.18.04.1, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 26 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.1
77.0.3865.90-0ubuntu0.18.04.1
chromium
openSUSE:Leap 15.1
From an advisory covering 35 CVEs
 before 77.0.3865.75-lp151.2.30.1
77.0.3865.75-lp151.2.30.1
Show 6 moreShow less
Affected packages
PackageAffectedFixed
chromium
openSUSE:Leap 15.0
From an advisory covering 35 CVEs
 before 77.0.3865.75-lp150.239.1
77.0.3865.75-lp150.239.1
chromium
SUSE:Package Hub 15
From an advisory covering 35 CVEs
 before 77.0.3865.75-bp150.231.1
77.0.3865.75-bp150.231.1
chromium
SUSE:Package Hub 15 SP1
From an advisory covering 35 CVEs
 before 77.0.3865.75-bp151.3.12.1
77.0.3865.75-bp151.3.12.1
chromium
SUSE:Package Hub 12 SP3
From an advisory covering 86 CVEs
 before 78.0.3904.87-10.1
78.0.3904.87-10.1
chromium
openSUSE:Tumbleweed
From an advisory covering 1081 CVEs
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-5879 is a medium vulnerability (CVSS 6.5) in Google Chrome, published September 19, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in chromium 78.0.3904.87-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2 versions, 2,332 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open