CVE-2019-13758

MEDIUM

Google Chrome < 79.0.3945.79 - Navigation Restriction Bypass via Crafted HTML Page

Title source: llm

Description

Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

References (10)

Core 10

Core References

Vendor Advisory x_refsource_misc

https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html

Permissions Required x_refsource_misc

https://crbug.com/979441

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2019:4238

Broken Link vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/

Broken Link vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/

Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq

https://seclists.org/bugtraq/2020/Jan/27

Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2020/dsa-4606

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/202003-08

Scores

CVSS v3 4.3

EPSS 0.0100

EPSS Percentile 77.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

Status published

Products (9)

debian/debian_linux 9.0

debian/debian_linux 10.0

fedoraproject/fedora 30

fedoraproject/fedora 31

google/chrome < 79.0.3945.79

redhat/enterprise_linux_desktop 6.0 (2 CPE variants)

redhat/enterprise_linux_for_scientific_computing 6.0 (2 CPE variants)

redhat/enterprise_linux_server 6.0 (2 CPE variants)

redhat/enterprise_linux_workstation 6.0 (2 CPE variants)

Published Dec 10, 2019

Tracked Since Feb 18, 2026