Google Chrome 72.0.3626.121 was released to address CVE-2019-5786. The company’s Clement Lecigne reports the vulnerability was exploited in the wild together with a Microsoft Windows privilege escalation vulnerability (CVE-2019-0808).

Use-After-Free Vulnerability in Google Chrome Exploited In The Wild (CVE-2019-5786)

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to
    potentially perform out of bounds memory access via a crafted HTML page. (CVE-2019-5786)

Update to 73.0.3683.75. Fixes large bucket of CVEs.

CVE-2019-5754 CVE-2019-5782 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767 CVE-2019-5768 CVE-2019-5769 CVE-2019-5770 CVE-2019-5771 CVE-2019-5772 CVE-2019-5773 CVE-2019-5774 CVE-2019-5775 CVE-2019-5776 CVE-2019-5777 CVE-2019-5778 CVE-2019-5779 CVE-2019-5780 CVE-2019-5781 CVE-2019-5784 CVE-2019-5786 CVE-2019-5787 CVE-2019-5788 CVE-2019-5789 CVE-2019-5790 CVE-2019-5791 CVE-2019-5792 CVE-2019-5793 CVE-2019-5794 CVE-2019-5795 CVE-2019-5796 CVE-2019-5797 CVE-2019-5798 CVE-2019-5799 CVE-2019-5800 CVE-2019-5802 CVE-2019-5803

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201903-23 (Chromium: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the referenced CVE identifiers and Google Chrome       Releases for details.
  Impact :

    Please review the referenced CVE identifiers and Google Chrome Releases       for details.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0481 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    This update upgrades Chromium to version 72.0.3626.121.

    Security Fix(es):

    * chromium-browser: Use-after-free in FileReader (CVE-2019-5786)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Clement Lecigne discovered a use-after-free issue in chromium's file reader implementation. A maliciously crafted file could be used to remotely execute arbitrary code because of this problem.

This update also fixes a regression introduced in a previous update.
The browser would always crash when launched in remote debugging mode.

This update for chromium fixes the following issues :

Chromium was updated: to 72.0.3626.121 :

  - CVE-2019-5786: Use-after-free in FileReader fixed     (boo#1127602)

  - Feature fixes update only

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.121. It is, therefore, affected by a vulnerability as referenced in the 2019_03_stable-channel-update-for-desktop advisory.

  - Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2019-5786)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.121. It is, therefore, affected by a vulnerability as referenced in the 2019_03_stable-channel-update-for-desktop advisory.

  - Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2019-5786)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.121. It is, therefore, affected by a UAF vulnerability as referenced in the 2019_03_stable-channel-update-for-desktop advisory.

ID	Name	Product	Family	Severity
413583	SCA: security update for puppeteer (GHSA-c2gp-86p4-5935)	Tenable Cloud Security	SCA Checks	medium
413583	SCA: security update for puppeteer (GHSA-c2gp-86p4-5935)	Tenable Self-Hosted Container Security	SCA Checks	medium
403813	Alpine: multiple chromium packages: security update to 72.0.3626.121-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
403813	Alpine: multiple chromium packages: security update to 72.0.3626.121-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
400601	Alpine: multiple chromium packages: security update to 72.0.3626.109-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400601	Alpine: multiple chromium packages: security update to 72.0.3626.109-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
124466	Fedora 30 : chromium (2019-05a780936d)	Nessus	Fedora Local Security Checks	critical
123429	GLSA-201903-23 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
123100	Fedora 29 : chromium (2019-561eae4626)	Nessus	Fedora Local Security Checks	critical
122771	RHEL 6 : chromium-browser (RHSA-2019:0481)	Nessus	Red Hat Local Security Checks	medium
122723	Debian DSA-4404-1 : chromium - security update	Nessus	Debian Local Security Checks	medium
122714	openSUSE Security Update : chromium (openSUSE-2019-298)	Nessus	SuSE Local Security Checks	medium
122617	Google Chrome < 72.0.3626.121 Vulnerability	Nessus	Windows	medium
122616	Google Chrome < 72.0.3626.121 Vulnerability	Nessus	MacOS X Local Security Checks	medium
700422	Google Chrome < 72.0.3626.121 Use-After-Free	Nessus Network Monitor	Web Clients	high

Detections

Analytics

CVE-2019-5786

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

critical

high

critical

medium

medium

medium

medium

medium

high