PT-2023-11281 · Google · Google Chrome

Publicado 2023-08-25 · Atualizado 2023-08-31 · CVE-2019-13690

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 75.0.3770.80

Description Inappropriate implementation in the OS allowed a remote attacker to perform OS-level privilege escalation via a malicious file. The issue has a high security severity.

Recommendations For Google Chrome on ChromeOS versions prior to 75.0.3770.80, update to version 75.0.3770.80 or later to resolve the issue.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-13690

Produtos afetados

Google Chrome

Referências · 8

• 🔥 https://bugs.chromium.org/p/chromium/issues/detail?id=960111 · Exploit
• 🔥 https://crbug.com/960111 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13690 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1695147417992130750 · Publicação no Twitter
• https://t.me/cibsecurity/69207 · Publicação no Telegram
• https://twitter.com/geekphane/status/1695173008015466914 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2019-13690 · Nota de Segurança
• https://twitter.com/TechFishNews/status/1695173273875796283 · Publicação no Twitter