Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jun 13, 2022

CVE-2019-5786

High
EPSS 89.5%CISA KEV
Google/Chrome Blink

Description

Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.

EPSS — Exploit Probability

89.5%

Higher than 99.5% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2019-5786

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
89.5%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

May 23, 2022

Added to KEV

May 23, 2022

Remediation Due

Jun 13, 2022

Affected Product

Google

Chrome Blink

View all Google CVEs