CVE-2019-13720
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to...
8.8 HighIn KEVPublic exploitFix available
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
49.4%Up 46.9 points since Apr 14, 2021
What each source reports
NVD Score used
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2019-13720- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2019-13720- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2019-5139
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
EUVD-2019-5139- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3qg6-gw2x-w9cq
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to...
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
GHSA-3qg6-gw2x-w9cq- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416, CWE-787
- Updated
- 2026-11-02
CISA KEV No score
Google Chrome WebAudio Use-After-Free Vulnerability
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2019-13720- Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2019-13720- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2019-13720
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
DEBIAN-CVE-2019-13720- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:3775
Red Hat Security Advisory: chromium-browser security update
- Record
RHSA-2019:3775- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-13720
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
UBUNTU-CVE-2019-13720- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0320 No score
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 78.0.3904.87 fixes security issues:
Multiple flaws were found in the way Chromium 77.0.3865.120 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2019-13699, CVE-2019-13700, CVE-2019-13701, CVE-2019-13702, CVE-2019-13703, CVE-2019-13704, CVE-2019-13705, CVE-2019-13706, CVE-2019-13707, CVE-2019-13708, CVE-2019-13709, CVE-2019-13710, CVE-2019-13711, CVE-2019-13713, CVE-2019-13714, CVE-2019-13715, CVE-2019-13716, CVE-2019-13717, CVE-2019-13718, CVE-2019-13719, CVE-2019-13720, CVE-2019-13721)
- Record
MGASA-2019-0320- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2421-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87 boo#1155643:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
- Record
openSUSE-SU-2019:2421-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2426-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87 boo#1155643:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:2426-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2427-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87 boo#1155643:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2019:2427-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2447-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492)
Security issues fixed with this version update:
- CVE-2019-13721: Use-after-free in PDFium
- CVE-2019-13720: Use-after-free in audio
- CVE-2019-13699: Use-after-free in media
- CVE-2019-13700: Buffer overrun in Blink
- CVE-2019-13701: URL spoof in navigation
- CVE-2019-13702: Privilege elevation in Installer
- CVE-2019-13703: URL bar spoofing
- CVE-2019-13704: CSP bypass
- CVE-2019-13705: Extension permission bypass
- CVE-2019-13706: Out-of-bounds read in PDFium
- CVE-2019-13707: File storage disclosure
- CVE-2019-13708: HTTP authentication spoof
- CVE-2019-13709: File download protection bypass
- CVE-2019-13710: File download protection bypass
- CVE-2019-13711: Cross-context information leak
- CVE-2019-15903: Buffer overflow in expat
- CVE-2019-13713: Cross-origin data leak
- CVE-2019-13714: CSS injection
- CVE-2019-13715: Address bar spoofing
- CVE-2019-13716: Service worker state error
- CVE-2019-13717: Notification obscured
- CVE-2019-13718: IDN spoof
- CVE-2019-13719: Notification obscured
- CVE-2019-13693: Use-after-free in IndexedDB
- CVE-2019-13694: Use-after-free in WebRTC
- CVE-2019-13695: Use-after-free in audio
- CVE-2019-13696: Use-after-free in V8
- CVE-2019-13697: Cross-origin size leak.
- CVE-2019-13685: Use-after-free in UI
- CVE-2019-13688: Use-after-free in media
- CVE-2019-13687: Use-after-free in media
- CVE-2019-13686: Use-after-free in offline pages
- CVE-2019-5870: Use-after-free in media
- CVE-2019-5871: Heap overflow in Skia
- CVE-2019-5872: Use-after-free in Mojo
- CVE-2019-5874: External URIs may trigger other browsers
- CVE-2019-5875: URL bar spoof via download redirect
- CVE-2019-5876: Use-after-free in media
- CVE-2019-5877: Out-of-bounds access in V8
- CVE-2019-5878: Use-after-free in V8
- CVE-2019-5879: Extension can bypass same origin policy
- CVE-2019-5880: SameSite cookie bypass
- CVE-2019-5881: Arbitrary read in SwiftShader
- CVE-2019-13659: URL spoof
- CVE-2019-13660: Full screen notification overlap
- CVE-2019-13661: Full screen notification spoof
- CVE-2019-13662: CSP bypass
- CVE-2019-13663: IDN spoof
- CVE-2019-13664: CSRF bypass
- CVE-2019-13665: Multiple file download protection bypass
- CVE-2019-13666: Side channel using storage size estimate
- CVE-2019-13667: URI bar spoof when using external app URIs
- CVE-2019-13668: Global window leak via console
- CVE-2019-13669: HTTP authentication spoof
- CVE-2019-13670: V8 memory corruption in regex
- CVE-2019-13671: Dialog box fails to show origin
- CVE-2019-13673: Cross-origin information leak using devtools
- CVE-2019-13674: IDN spoofing
- CVE-2019-13675: Extensions can be disabled by trailing slash
- CVE-2019-13676: Google URI shown for certificate warning
- CVE-2019-13677: Chrome web store origin needs to be isolated
- CVE-2019-13678: Download dialog spoofing
- CVE-2019-13679: User gesture needed for printing
- CVE-2019-13680: IP address spoofing to servers
- CVE-2019-13681: Bypass on download restrictions
- CVE-2019-13682: Site isolation bypass
- CVE-2019-13683: Exceptions leaked by devtools
- CVE-2019-5869: Use-after-free in Blink
- CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
- CVE-2019-5867: Out-of-bounds read in V8
- CVE-2019-5850: Use-after-free in offline page fetcher
- CVE-2019-5860: Use-after-free in PDFium
- CVE-2019-5853: Memory corruption in regexp length check
- CVE-2019-5851: Use-after-poison in offline audio context
- CVE-2019-5859: res: URIs can load alternative browsers
- CVE-2019-5856: Insufficient checks on filesystem: URI permissions
- CVE-2019-5855: Integer overflow in PDFium
- CVE-2019-5865: Site isolation bypass from compromised renderer
- CVE-2019-5858:…
- Record
openSUSE-SU-2019:2447-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2664-1 No score
Security update for opera
This update for opera fixes the following issues:
Opera was updated to version 65.0.3467.62
- CHR-7658 Update chromium on desktop-stable-78-3467 to 78.0.3904.108
- DNA-81387 Remove support for old bundle structure in signing scripts
- DNA-81675 Update widevine signature localisation in signed packages
- DNA-81884 [Advanced content blocking] Ads are blocked for whitelisted page in Incognito
- DNA-82230 [Mac] URL is not correctly aligned when the Geolocation is ON
- DNA-82368 Generating diffs for unsinged packages doesn’t work
- DNA-82414 Wrong number of trackers displayed just after deactivating adblocker
- DNA-82470 [Linux] Snap package doesn’t recognise GNOME 3.24 platform snap connection
- DNA-82473 https://www.nba.com/standings not working with AdBlocker enabled
- DNA-82484 Update content blocking icon
- DNA-82485 [Mac 10.15] Opera installer error at the end of installation process
- DNA-82508 [Adblocker] Predefault lists can not be unchecked
- DNA-82557 Address bar dropdown launches HTTP GETs for every autocomplete
- DNA-82596 Do not block first-party ‘trackers’
- DNA-82616 Settings – Tracker Blocker – Add “Learn more” link
- DNA-82626 [Win] High CPU usage due to media indicator animation
- DNA-82647 Tab icons mixed after Tab closing
- DNA-82742 Pages won’t load after closing private mode
- DNA-82768 Mark also the reference group in “exp” header for DNA-81658
- DNA-82840 Disable favicon fetching for typed URLs
Complete Opera 65.0 changelog at:
https://blogs.opera.com/desktop/changelog-for-65/
Update to version 64.0.3417.92
- DNA-81358 Wrong key color on extension popup in dark mode
- DNA-82208 Cherry-pick CVE-2019-13721 and CVE-2019-13720
Update to version 64.0.3417.83
- DNA-79676 Use FFmpegDemuxer to demux ADTS
- DNA-81010 Spinner takes a lot of cpu
- DNA-81385 Keys on some popups in dark mode can’t be hovered
- DNA-81494 [Mac] Snap onboarding doesn’t appear while the icon still flashes
- DNA-82003 Restore legacy path for AudioFileReader
- DNA-82019 Enable #ffmpeg-demuxer-everywhere by default in developer
- DNA-82028 Enable #ffmpeg-demuxer-everywhere by default in stable on macOS
Update to version 64.0.3417.73
- CHR-7598 Update chromium on desktop-stable-77-3417 to 77.0.3865.120
- DNA-80049 The upper border of “Add to bookmarks bar” popup is cut off in white mode
- DNA-80395 Menu popup borders in Settings are invisible in Dark mode
- DNA-81263 Change the continue section buttons visibility as in description
- DNA-81304 Crash at chrome::NewTab(Browser*)
- DNA-81650 Easy Setup Style looks weird
- DNA-81708 Missing dependency on //chrome/common:buildflags
- DNA-81732 [Mac][Catalina] Cannot maximize a window after it’s been minimized
- DNA-81737 Renderer crash on https://codesandbox.io/s/vanilla-ts
- DNA-81753 Pinned tab only remembered after next restart
- DNA-81769 Investigate reports about slow speed dial loading in O64 blog comments
- DNA-81859 [Mac 10.15] Crash whenever navigating to any page
- DNA-81893 Get Personalised news on SpeedDials broken layout
Update to version 64.0.3417.61
- DNA-80760 Sidebar Messenger icon update
- DNA-81165 Remove sharing service
- DNA-81211 [Advanced content blocking] Can not turn off ad blocking in private mode
- DNA-81323 content_filter::RendererConfigProvider destroyed on wrong sequence
- DNA-81487 [VPN disclaimer][da, ta] Text should be multiline
- DNA-81545 opr-session entry for Google ads not working
- DNA-81580 Speed dials’ colours change after Opera update
- DNA-81597 [Adblocker] Google Ads link hides if clicking
- DNA-81639 Widevine verification status is PLATFORM_TAMPERED
- DNA-81237 [Advanced content blocking] noCoinis not enabled by default
- DNA-81375 Adblocking_AddToWhitelist_Popup and Adblocking_RemoveFromWhitelist_Popup metric not recorded in stats
- DNA-81413 Error in console when Start Page connects to My Flow
- DNA-81435 Adjust VPN disclaimer to…
- Record
openSUSE-SU-2019:2664-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 78.0.3904.87-1 | 78.0.3904.87-1 |
chromiumDebian:13 |
before 78.0.3904.87-1 | 78.0.3904.87-1 |
chromiumDebian:14 |
before 78.0.3904.87-1 | 78.0.3904.87-1 |
chromiumDebian:10 From an advisory covering 71 CVEs |
before 78.0.3904.97-1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 7 moreShow less76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.87-1 |
78.0.3904.97-1~deb10u1 |
chromium-browser-stableMageia:7 From an advisory covering 22 CVEs |
before 78.0.3904.87-1.mga7 | 78.0.3904.87-1.mga7 |
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:78.0.3904.87-1.el6_10 | 0:78.0.3904.87-1.el6_10 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:78.0.3904.87-1.el6_10 | 0:78.0.3904.87-1.el6_10 |
chromium-browserUbuntu:16.04:LTS |
before 78.0.3904.97-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
78.0.3904.97-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 78.0.3904.97-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 28 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.2 |
78.0.3904.97-0ubuntu0.18.04.1 |
chromiumopenSUSE:Leap 15.0 From an advisory covering 2 CVEs |
before 78.0.3904.87-lp151.2.42.1 | 78.0.3904.87-lp151.2.42.1 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 78.0.3904.87-lp151.2.42.1 | 78.0.3904.87-lp151.2.42.1 |
chromiumSUSE:Package Hub 15 From an advisory covering 2 CVEs |
before 78.0.3904.87-bp150.243.1 | 78.0.3904.87-bp150.243.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 2 CVEs |
before 78.0.3904.87-bp151.3.25.1 | 78.0.3904.87-bp151.3.25.1 |
chromiumSUSE:Package Hub 12 SP3 From an advisory covering 86 CVEs |
before 78.0.3904.87-10.1 | 78.0.3904.87-10.1 |
operaopenSUSE:Leap 15.1 NonFree From an advisory covering 2 CVEs |
before 65.0.3467.62-lp151.2.9.1 | 65.0.3467.62-lp151.2.9.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | cve-2019-13720/cve-2019-13720 | 2019-11-04 |
| Exploit-DB | Google Chrome 78.0.3904.70 - Remote Code Execution | 2022-05-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-13720 is a high vulnerability (CVSS 8.8) in Google Chrome, published November 2, 2019. CISA lists it as known to be exploited, since May 23, 2022. EUVD reports exploitation since May 23, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 49.4%, the 98th percentile. Fixed in chromium 78.0.3904.87-1.
References
crbug.com/1019226
chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html
lists.opensuse.org/opensuse-security-announce/2019-12/msg00022.html
security.gentoo.org/glsa/202004-04
packetstormsecurity.com/files/167066/Google-Chrome-78.0.3904.70-Remote-Code-Execution.html
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13720
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-13720
github.com/advisories/GHSA-3qg6-gw2x-w9cq
security-tracker.debian.org/tracker/CVE-2019-13720
advisories.mageia.org/MGASA-2019-0320.html
bugs.mageia.org/show_bug.cgi?id=25655
access.redhat.com/errata/RHSA-2019:3775
bugzilla.redhat.com/show_bug.cgi?id=1768578
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3775.json
cve.org/CVERecord?id=CVE-2019-13720
ubuntu.com/security/CVE-2019-13720
bugzilla.suse.com/1155643
suse.com/security/cve/CVE-2019-13720
This page doesn't list everything
Left out here: 4 versions, 2,150 references and the rest of 2 source descriptions. The JSON record has them.