CVE-2019-5861

CVE-2019-5861 describes an insufficient data validation vulnerability in Google Chrome's Blink rendering engine prior to version 76.0.3809.87, allowing a remote attacker to bypass anti-clickjacking policies through a specially crafted HTML page. This medium-severity vulnerability (CVSS 4.3) requires user interaction and network access for exploitation, primarily impacting integrity with no confidentiality or availability concerns. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has received some community and media attention.