Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-13724

26
FAUCET Score

CVE-2019-13724 describes an out-of-bounds memory access vulnerability in Google Chrome's WebBluetooth component, affecting versions prior to 78.0.3904.108. This high-severity flaw (CVSS 8.8) could allow a remote attacker to achieve heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page. While the vulnerability has a high impact on confidentiality, integrity, and availability, there is no evidence of active exploitation, public exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
< 78.0.3904.108CPE match
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.44%
Probability of exploitation in next 30 days
EPSS Percentile
70.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0144 is in the 69th percentile among its peer group of 14,875 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 SupplementaryFixed in: chromium-browser-0:78.0.3904.108-1.el6_10
View patch
googlevendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2019-13724Moderate

chromium-browser: out-of-bounds access in bluetooth

Nov 18, 2019

References

lists.opensuse.org / opensuse-security-announce/2019-12/msg00035.html
access.redhat.com / errata/RHSA-2019:3955
chromereleases.googleblog.com / 2019/11/stable-channel-update-for-desktop_18.html
Release NotesVendor Advisory
crbug.com / 1024116
Permissions RequiredVendor Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/54XWRJ5LDFL27QXBPIBX3EHO4TPMKN4R
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/USW7PGIHNPE6W3LGY6ZDFLELQGSL52CH
security.gentoo.org / glsa/202003-08