CVE-2019-13720: high-severity vulnerability in Google Chrome
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply updates per vendor instructions.
A flaw in Google Chrome's audio processing allows attackers to corrupt computer memory through a specially crafted website, potentially leading to crashes or malicious code execution.
Use-after-free vulnerability in WebAudio component; remote attacker can craft malicious HTML to trigger heap corruption. Exploitation requires user to visit a malicious webpage and interact with audio features. Impacts confidentiality, integrity, and availability of the affected system.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.