This security bulletin contains information about 1 vulnerabilities.
CWE-416 - Use After Free
Exploit availability: YesDescription
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error in FileReader. A remote attacker can trick the victim into opening a specially crafted file with Google Chrome, trigger use-after-free error and execute arbitrary code on the target system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Note: the vulnerability is being exploited in the wild.
Install updates from vendor's website.Vulnerable software versions
Google Chrome: 70.0.3538.67 - 72.0.3626.119
Can this vulnerability be exploited remotely?
How the attacker can exploit this vulnerability?
Is there known malware, which exploits this vulnerability?