Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Chromium on Debian bypasses popup blocker

CVE-2019-5840 · published 7 years ago
Summary

Versions of Chromium packaged for Debian and running on iOS before 75.0.3770.80 show the wrong security message in the popup blocker. Because of this, a malicious website could trick the browser into opening pages that should have been blocked. Update Chromium to the latest version to restore proper protection.

What to do
  • Update debian chromium to version 75.0.3770.80-1.
  • Update google chrome to version 75.0.3770.80 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian chromium < 75.0.3770.80-1
Fix: upgrade to 75.0.3770.80-1
Debian:13 debian chromium < 75.0.3770.80-1
Fix: upgrade to 75.0.3770.80-1
Debian:14 debian chromium < 75.0.3770.80-1
Fix: upgrade to 75.0.3770.80-1
– google chrome < 75.0.3770.80
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
– debian debian_linux 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
– fedoraproject fedora 29
30
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
– opensuse backports sle-15
cpe:2.3:o:opensuse:backports:sle-15:-:*:*:*:*:*:*
– opensuse leap 15.0
15.1
42.3
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Original advisory text
Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
References
Severity
4.3 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-362Race Condition
Timeline
Published27 Jun 2019
Updated31 Oct 2026
First seen21 Sep 2026
Sources
DEBIAN-CVE-2019-5840 · OSV
CVE-2019-5840 · NVD
Track software like this
Free during beta