CVE-2019-13720 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Arbitrary code execution |
| Description | A use-after-free vulnerability has been found in the audio component of the chromium browser before 78.0.3904.87. Google is aware of reports that an exploit for this vulnerability exists in the wild. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1061 | electron | 7.0.0-1 | 7.0.1-1 | Critical | Fixed | |
| AVG-1059 | qt5-webengine | 5.13.2-1 | 5.13.2-2 | Critical | Fixed | FS#64347 |
| AVG-1058 | chromium | 78.0.3904.70-1 | 78.0.3904.87-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 04 Nov 2019 | ASA-201911-7 | AVG-1061 | electron | Critical | arbitrary code execution |
| 02 Nov 2019 | ASA-201911-2 | AVG-1059 | qt5-webengine | Critical | arbitrary code execution |
| 01 Nov 2019 | ASA-201911-1 | AVG-1058 | chromium | Critical | arbitrary code execution |
| References |
|---|
https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html https://crbug.com/1019226 |