Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2019-13699: Chromium on Debian may allow code execution from malicious page
CVE-2019-13699 · published 6 years ago
Summary
A flaw in Chromium's media handling can let a malicious web page corrupt memory if an attacker has already compromised the browser's rendering process. This could lead to the attacker running their own code on the affected system. Upgrade Chromium to the newest release available for Debian to protect against this risk.
What to do
- Update debian chromium to version 78.0.3904.87-1.
- Update google chrome to version 78.0.3904.70 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | chromium |
< 78.0.3904.87-1 Fix: upgrade to 78.0.3904.87-1
|
| Debian:13 | debian | chromium |
< 78.0.3904.87-1 Fix: upgrade to 78.0.3904.87-1
|
| Debian:14 | debian | chromium |
< 78.0.3904.87-1 Fix: upgrade to 78.0.3904.87-1
|
| – | chrome |
< 78.0.3904.70 cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
|
| – | opensuse | backports_sle |
15.0 cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* |
Original advisory text
Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Severity
8.8
High
Type
CWE-416Use After Free
Timeline
Published25 Nov 2019
Updated4 Nov 2026
First seen21 Sep 2026
Track software like this
Free during beta