CVE-2019-5780

—

CVSS 3.0

7.8 high

EPSS

<1%p27

Published

Feb 19, 2019 (Feb 19, 2019)

Modified

Jun 17, 2026

Description

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.

Vendors: google redhat debian fedoraproject
Products: chrome, enterprise linux desktop, enterprise linux server, enterprise linux workstation, debian linux, fedora
Weakness: CWE-20
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.