CVE-2019-5784

MEDIUM

Google Chrome < 72.0.3626.96 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Exploits (1)

nomisec WORKING POC
by rooootdev · poc
https://github.com/rooootdev/CVE-2019-5784-PoC

References (2)

Core 2
Core References
Issue Tracking x_refsource_misc
https://crbug.com/915975

Scores

CVSS v3 6.5
EPSS 0.0930
EPSS Percentile 92.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
google/chrome < 72.0.3626.96
Published Jun 27, 2019
Tracked Since Feb 18, 2026