ID:7790 - Exploit for Use-after-free in Google Chrome - CVE-2019-13720

 
Main Vulnerability Database Exploits ID:7790 - Exploit for Use-after-free in Google Chrome - CVE-2019-13720

ID:7790 - Exploit for Use-after-free in Google Chrome - CVE-2019-13720

Published: May 12, 2022


Vulnerability identifier: #VU22474
Vulnerability risk: Critical
CVE-ID: CVE-2019-13720
CWE-ID: CWE-416
Exploitation vector: Remote access
Vulnerable software:
Google Chrome

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing HTML content within the audio component. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a use-after-free error and execute arbitrary code on the target system.

Note, this vulnerability is being actively exploited in the wild.


Remediation

Install updates from vendor's website.