PT-2023-11281 · Google · Google Chrome

Published 2023-08-25 · Updated 2023-08-31 · CVE-2019-13690

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 75.0.3770.80

Description Inappropriate implementation in the OS allowed a remote attacker to perform OS-level privilege escalation via a malicious file. The issue has a high security severity.

Recommendations For Google Chrome on ChromeOS versions prior to 75.0.3770.80, update to version 75.0.3770.80 or later to resolve the issue.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-13690

Affected Products

Google Chrome

References · 8

• 🔥 https://bugs.chromium.org/p/chromium/issues/detail?id=960111 · Exploit
• 🔥 https://crbug.com/960111 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13690 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13690 · Security Note
• https://twitter.com/CVEnew/status/1695147417992130750 · Twitter Post
• https://t.me/cibsecurity/69207 · Telegram Post
• https://twitter.com/geekphane/status/1695173008015466914 · Twitter Post
• https://twitter.com/TechFishNews/status/1695173273875796283 · Twitter Post