CVE-2019-5786

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

  • Published Jun 27, 2019
  • CVSS 6.5 medium
  • 61.1% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog
  • A Metasploit module exploits it
  • A fix is available

Affected software

CVE-2019-5786 at the National Vulnerability Database