Zero-day Chrome/Windows combo actively exploited in the wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-5786 | Actively Exploited Use-After-Free in Google Chrome Blink | 6.5 | 61% | KEVPoC | KEV |
From the original article
2 min read at helpnetsecurity.com
We now know why a number of Googlers made a point to urge users to implement the latest Chrome update as soon as possible: the vulnerability ( CVE-2019-5786 ) is definitely being actively exploited in conjunction with another zero-day in Windows. The Windows bug is a local privilege escalation in the Windows win32k.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.