Skip to content
OpenAdvisories
Unscored CVE-2019-5852 EUVD-2019-15423GHSA-9wjv-qxgv-8mq7

Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive…

Published Nov 25, 2019 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 76.0.3809.87 76.0.3809.87

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 76.0.3809.87-1 —
Debian 13 chromium 76.0.3809.87-1 —
Debian 12 chromium 76.0.3809.87-1 —
Debian 10 chromium 76.0.3809.100-1~deb10u1 DSA-4500-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 76.0.3809.87-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 76.0.3809.87-0ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 chromium-browser 76.0.3809.87-1.el6_10 RHSA-2019:2427
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP1 chromium 76.0.3809.87-bp151.3.3.3 openSUSE-SU-2019:1901-1
SUSE Package Hub 15 chromium 76.0.3809.87-bp150.220.1 openSUSE-SU-2019:1853-1
SUSE Package Hub 12 SP3 chromium 78.0.3904.87-10.1 openSUSE-SU-2019:2447-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 93.0.4577.82-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10681-1
openSUSE Leap 15.1 chromium 76.0.3809.87-lp151.2.15.1 openSUSE-SU-2019:1849-1
openSUSE Leap 15.0 chromium 76.0.3809.87-lp150.224.1 openSUSE-SU-2019:1848-1

Advisories 9

References