CVE-2019-13720 flaw in Chrome exploited in Op. WizardOpium attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-13720 | Use-After-Free in Google Chrome WebAudio Allows Heap Corruption (Actively Exploited) | 8.8 | 49% | KEVPoC | KEV |
| CVE-2019-13721 | Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page | 8.8 | 1% | ||
| CVE-2019-5786 | Actively Exploited Use-After-Free in Google Chrome Blink | 6.5 | 61% | KEVPoC | KEV |
From the original article
3 min read at securityaffairs.com
One of the two flaws in Chrome addressed by Google, CVE-2019-13720, was exploited in a campaign that experts attribute to Korea-linked threat actors. This week Google released security updates to address two high severity vulnerabilities in the Chrome browser, one of which is a zero-day flaw actively exploited in attacks in the wild to hijack computers.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.