Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5837 State: PUBLISHED Published: 2019-06-27T16:13:44 Last Updated: 2024-08-04T20:09:23.212Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html - https://crbug.com/918293 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
rity-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKN4GPMBQ3SDXWB4HL45II5CZ7P2E4AI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPM7VPE27DUNJLXM4F5PAAEFFWOEND6X/ - https://www.debian.org/security/2019/dsa-4500 - https://seclists.org/bugtraq/2019/Aug/19 - https://security.gentoo.org/glsa/201908-18 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EI3DGFVT7CKJO6YVMP55R35HCDVEIC4Z/
CVE ID: CVE-2019-5838 State: PUBLISHED Published: 2019-06-27T16:13:44 Last Updated: 2024-08-04T20:09:23.473Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html - https://crbug.com/893087 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - https://lis
ml - https://crbug.com/893087 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKN4GPMBQ3SDXWB4HL45II5CZ7P2E4AI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPM7VPE27DUNJLXM4F5PAAEFFWOEND6X/ - https://www.debian.org/security/2019/dsa-4500 - https://seclists.org/bugtraq/2019/Aug/19 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2019-5839 State: PUBLISHED Published: 2019-06-27T16:13:44 Last Updated: 2024-08-04T20:09:23.612Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html - https://crbug.com/925614 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/packag
sts.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKN4GPMBQ3SDXWB4HL45II5CZ7P2E4AI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPM7VPE27DUNJLXM4F5PAAEFFWOEND6X/ - https://www.debian.org/security/2019/dsa-4500 - https://seclists.org/bugtraq/2019/Aug/19 - https://security.gentoo.org/glsa/201908-18 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EI3DGFVT7CKJO6YVMP55R35HCDVEIC4Z/
CVE ID: CVE-2019-5840 State: PUBLISHED Published: 2019-06-27T16:13:44 Last Updated: 2024-08-04T20:09:23.680Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html - https://crbug.com/951782 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
rity-announce/2019-06/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKN4GPMBQ3SDXWB4HL45II5CZ7P2E4AI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPM7VPE27DUNJLXM4F5PAAEFFWOEND6X/ - https://www.debian.org/security/2019/dsa-4500 - https://seclists.org/bugtraq/2019/Aug/19 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2019-5841 State: PUBLISHED Published: 2019-12-10T20:45:21 Last Updated: 2024-08-04T20:09:23.644Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html - https://crbug.com/969588
CVE ID: CVE-2019-5842 State: PUBLISHED Published: 2019-11-25T14:22:55 Last Updated: 2024-08-04T20:09:23.670Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/961413 - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop_13.html
CVE ID: CVE-2019-5843 State: PUBLISHED Published: 2019-12-10T20:45:21 Last Updated: 2024-08-04T20:09:23.188Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in JavaScript in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html - https://crbug.com/939316
CVE ID: CVE-2019-5844 State: PUBLISHED Published: 2020-01-03T22:35:24 Last Updated: 2024-08-04T20:09:23.584Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html - https://crbug.com/915206 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html - h
security-announce/2020-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html
CVE ID: CVE-2019-5845 State: PUBLISHED Published: 2020-01-03T22:35:25 Last Updated: 2024-08-04T20:09:23.630Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html - https://crbug.com/915197 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html - h
CVE ID: CVE-2019-5846 State: PUBLISHED Published: 2020-01-03T22:35:25 Last Updated: 2024-08-04T20:09:23.687Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html - https://crbug.com/915218 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html - h
CVE ID: CVE-2019-5847 State: PUBLISHED Published: 2019-11-25T14:22:55 Last Updated: 2024-08-04T20:09:23.839Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/972921 - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop.html
CVE ID: CVE-2019-5848 State: PUBLISHED Published: 2019-11-25T14:22:55 Last Updated: 2024-08-04T20:09:23.761Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop.html - https://crbug.com/951487
CVE ID: CVE-2019-5849 State: PUBLISHED Published: 2019-11-25T14:22:55 Last Updated: 2024-08-04T20:09:23.714Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html - https://crbug.com/954891
CVE ID: CVE-2019-5850 State: PUBLISHED Published: 2019-11-25T14:22:55 Last Updated: 2024-08-04T20:09:23.837Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/977462 - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html
CVE ID: CVE-2019-5851 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.803Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/977107
CVE ID: CVE-2019-5852 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.717Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/976713
CVE ID: CVE-2019-5853 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.768Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/976627
CVE ID: CVE-2019-5854 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.695Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/966263
CVE ID: CVE-2019-5855 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.563Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/964872
CVE ID: CVE-2019-5856 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.637Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/964245
CVE ID: CVE-2019-5857 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.635Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/961237
CVE ID: CVE-2019-5858 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.702Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/960209
CVE ID: CVE-2019-5859 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.679Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/959438
CVE ID: CVE-2019-5860 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.804Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/956947
CVE ID: CVE-2019-5861 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.867Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/951525
CVE ID: CVE-2019-5862 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.743Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/946260
CVE ID: CVE-2019-5863 State: REJECTED Published: 2021-11-02T20:55:10 Last Updated: 2021-11-02T20:55:10 Description: No description available.
CVE ID: CVE-2019-5864 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.839Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/936900
CVE ID: CVE-2019-5865 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.753Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop_30.html - https://crbug.com/973103
CVE ID: CVE-2019-5866 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.590Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/07/stable-channel-update-for-desktop.html - https://crbug.com/978382
CVE ID: CVE-2019-5867 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.692Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/984344 - https://chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop.html
CVE ID: CVE-2019-5868 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.636Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop.html - https://crbug.com/983867
CVE ID: CVE-2019-5869 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.839Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/978793 - https://chromereleases.googleblog.com/2019/08/stable-channel-update-for-desktop_26.html
CVE ID: CVE-2019-5870 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.584Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/999311
CVE ID: CVE-2019-5871 State: PUBLISHED Published: 2019-11-25T14:22:56 Last Updated: 2024-08-04T20:09:23.641Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/990570
CVE ID: CVE-2019-5872 State: PUBLISHED Published: 2019-11-25T14:22:57 Last Updated: 2024-08-04T20:09:23.605Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/981492
CVE ID: CVE-2019-5873 State: PUBLISHED Published: 2019-11-25T14:22:57 Last Updated: 2024-08-04T20:09:23.626Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/989497
CVE ID: CVE-2019-5874 State: PUBLISHED Published: 2019-11-25T14:22:57 Last Updated: 2024-08-04T20:09:23.662Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/989797
CVE ID: CVE-2019-5875 State: PUBLISHED Published: 2019-11-25T14:22:57 Last Updated: 2024-08-04T20:09:23.850Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/979443