CVE-2019-5842 describes a use-after-free vulnerability in Google Chrome's Blink rendering engine, affecting versions prior to 75.0.3770.90. This flaw could allow a remote attacker to achieve heap corruption by enticing a user to visit a specially crafted HTML page. With a CVSS score of 6.5 (Medium), successful exploitation could lead to high availability impact, though it requires user interaction and has no confidentiality or integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 75.0.3770.90CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.