CVE-2019-5866

Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a…

published November 25, 2019

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

⚠️ A crafty HTML page is all it takes to trigger this out-of-bounds memory access in Google Chrome! Think of it as a restaurant where a diner sneaks in a menu item that wasn't approved — the kitchen gets confused, and chaos ensues! If exploited, this vulnerability could lead to heap corruption, making it possible for an attacker to manipulate memory and execute arbitrary code. The consequences could range from crashes to full control of the user's machine, depending on their intent. Yikes!

Put simply

Think of it as a restaurant where a diner sneaks in a menu item that wasn't approved — the kitchen gets confused, and chaos ensues! CVE-2019-5866 is an out-of-bounds memory access flaw affecting JavaScript in multiple versions of Google Chrome. It allows remote attackers to potentially exploit heap corruption through specially crafted HTML, leading to unpredictable behavior.

What to do

If exploited, this vulnerability could lead to heap corruption, making it possible for an attacker to manipulate memory and execute arbitrary code. The consequences could range from crashes to full control of the user's machine, depending on their intent. Yikes! To protect yourself, make sure to update Chrome to version 75.0.3770.142 or later immediately. Staying up to date is your best defense against such vulnerabilities! You've got this! Stay vigilant and keep your browser updated to ensure a safer browsing experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01109 · 65.6th percentile
Published
2019-11-25T14:22Z
EPSS history
Timeline
  • 25 NOV 14:22Z
    Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a…
    cvelistv5