PT-2019-2786 · Google+3 · Google Chrome+3

Mark Amery · Publicado 2019-07-15 · Atualizado 2024-06-15 · CVE-2019-5848

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 75.0.3770.142

Description The issue concerns incorrect font handling in autofill, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This could also lead to unauthorized access to protected information or cause a denial of service with a specially formed web page.

Recommendations For versions prior to 75.0.3770.142, update to version 75.0.3770.142 or later to resolve the issue.

Correção

Information Disclosure

Cleartext Storage of Sensitive Information

XSS

Enumeração de Fraquezas

CWE-200

CWE-312

CWE-79

Identificadores relacionados

ALT-PU-2019-2410

ALT-PU-2019-2502

BDU:2019-02738

CVE-2019-5848

DSA-4500-1

MGASA-2019-0283

OPENSUSE-SU-2019:1815-1

OPENSUSE-SU-2019_1815-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2019:1930

RHSA-2019_1930

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Suse

Referências · 2350

• https://suse.com/security/cve/CVE-2021-21192 · Nota
• https://suse.com/security/cve/CVE-2023-0129 · Nota
• https://suse.com/security/cve/CVE-2022-3044 · Nota
• https://suse.com/security/cve/CVE-2018-6089 · Nota
• https://suse.com/security/cve/CVE-2022-1872 · Nota
• https://suse.com/security/cve/CVE-2015-1294 · Nota
• https://suse.com/security/cve/CVE-2019-5831 · Nota
• https://suse.com/security/cve/CVE-2011-3051 · Nota
• https://suse.com/security/cve/CVE-2021-21187 · Nota
• https://suse.com/security/cve/CVE-2021-21142 · Nota
• https://suse.com/security/cve/CVE-2013-0893 · Nota
• https://suse.com/security/cve/CVE-2017-5024 · Nota
• https://suse.com/security/cve/CVE-2022-3304 · Nota
• https://suse.com/security/cve/CVE-2016-5188 · Nota
• https://suse.com/security/cve/CVE-2021-37969 · Nota