CVE-2019-5786
MEDIUM KEVGoogle Chrome < 72.0.3626.121 - Use-After-Free in Blink via Crafted HTML Page
Title source: llmExploitation Summary
CVE-2019-5786 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 23, 2022.
EIP tracks 3 public exploits from researchers including Metasploit, exodusintel, Clement Lecigne, István Kurucsai, timwr, including a Metasploit module exploits/windows/browser/chrome_filereader_uaf.
AI-analyzed exploit summary This exploit leverages a use-after-free vulnerability in Chrome 72.0.3626.119 on Windows 7 x86 via the FileReader.readAsArrayBuffer function to achieve arbitrary memory access and execute shellcode within a WebAssembly object. It requires the Chrome sandbox to be disabled for successful payload execution.
Description
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Exploits (3)
This exploit leverages a use-after-free vulnerability in Chrome 72.0.3626.119 on Windows 7 x86 via the FileReader.readAsArrayBuffer function to achieve arbitrary memory access and execute shellcode within a WebAssembly object. It requires the Chrome sandbox to be disabled for successful payload execution.
This is a functional exploit for CVE-2019-5786, a Chrome FileReader UaF vulnerability. It leverages site isolation and heap spraying to achieve arbitrary read/write primitives, leading to RCE via shellcode execution.
This Metasploit module exploits a use-after-free (UaF) vulnerability in Chrome 72.0.3626.119 on Windows 7 x86 via the FileReader.readAsArrayBuffer function. It leverages heap spraying and arbitrary memory access to execute shellcode within a WebAssembly object, bypassing Chrome's sandbox (if disabled).
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H