CVE-2019-5850

Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform…

published November 25, 2019

CVSS
—
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

🚨 A cleverly crafted HTML page could exploit a use-after-free vulnerability in Google Chrome prior to version 76.0.3809.87! Think of this flaw like a restaurant that forgot to clean up a table after a customer left — the next diner could find leftover utensils that should have been disposed of, leading to quite the messy situation! 🍽️ If an attacker successfully compromised the renderer process, they could potentially break out of the sandbox, gaining access to the underlying system. This could allow them to execute arbitrary code, putting your data at risk and creating a serious security nightmare! 😱

Put simply

Think of this flaw like a restaurant that forgot to clean up a table after a customer left — the next diner could find leftover utensils that should have been disposed of, leading to quite the messy situation! 🍽️ This vulnerability involves a use-after-free error when Chrome is in offline mode, allowing attackers to manipulate memory management and escape the confines of the sandbox.

What to do

If an attacker successfully compromised the renderer process, they could potentially break out of the sandbox, gaining access to the underlying system. This could allow them to execute arbitrary code, putting your data at risk and creating a serious security nightmare! 😱 To mitigate this vulnerability, update Google Chrome to version 76.0.3809.87 or later as soon as possible. Regularly check for updates and enable automatic updates to ensure you’re protected from future vulnerabilities. 🛡️ You've got this! Stay vigilant and keep your browser updated to keep those cyber villains at bay! 😄

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01009 · 62.8th percentile
Published
2019-11-25T14:22Z
EPSS history
Timeline
  • 25 NOV 14:22Z
    Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform…
    cvelistv5