p PatchFirst

CVE-2019-5864

CVE-2019-5864

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.

CVSS 4.3 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ unspecified, < 76.0.3809.87: Affected (custom)

    Update to 76.0.3809.87

  • chromium Debian:12

    Affected ranges
    • ECOSYSTEM: < 76.0.3809.87-1

    Update to 76.0.3809.87-1

  • chromium Debian:13

    Affected ranges
    • ECOSYSTEM: < 76.0.3809.87-1

    Update to 76.0.3809.87-1

  • chromium Debian:14

    Affected ranges
    • ECOSYSTEM: < 76.0.3809.87-1

    Update to 76.0.3809.87-1

  • chromium-browser Ubuntu:16.04:LTS

    Versions
    • 45.0.2454.101-0ubuntu1.1201
    • 47.0.2526.73-0ubuntu1.1218
    • 47.0.2526.106-0ubuntu1.1221
    • 48.0.2564.82-0ubuntu1.1222
    • 48.0.2564.116-0ubuntu1.1229
    • 49.0.2623.87-0ubuntu1.1232
    • 49.0.2623.108-0ubuntu1.1233
    • 50.0.2661.102-0ubuntu0.16.04.1.1237
    • 51.0.2704.79-0ubuntu0.16.04.1.1242
    • 52.0.2743.116-0ubuntu0.16.04.1.1250
    • 53.0.2785.143-0ubuntu0.16.04.1.1254
    • 53.0.2785.143-0ubuntu0.16.04.1.1257
    • 55.0.2883.87-0ubuntu0.16.04.1263
    • 56.0.2924.76-0ubuntu0.16.04.1268
    • 57.0.2987.98-0ubuntu0.16.04.1276
    • 58.0.3029.81-0ubuntu0.16.04.1277
    • 58.0.3029.96-0ubuntu0.16.04.1279
    • 58.0.3029.110-0ubuntu0.16.04.1281
    • 59.0.3071.109-0ubuntu0.16.04.1289
    • 59.0.3071.109-0ubuntu0.16.04.1291
    • 60.0.3112.78-0ubuntu0.16.04.1293
    • 60.0.3112.113-0ubuntu0.16.04.1298
    • 61.0.3163.79-0ubuntu0.16.04.1300
    • 61.0.3163.100-0ubuntu0.16.04.1306
    • 62.0.3202.62-0ubuntu0.16.04.1308
    • 62.0.3202.75-0ubuntu0.16.04.1313
    • 62.0.3202.89-0ubuntu0.16.04.1315
    • 62.0.3202.94-0ubuntu0.16.04.1317
    • 63.0.3239.84-0ubuntu0.16.04.1
    • 63.0.3239.132-0ubuntu0.16.04.1
    • 64.0.3282.119-0ubuntu0.16.04.1
    • 64.0.3282.140-0ubuntu0.16.04.1
    • 64.0.3282.167-0ubuntu0.16.04.1
    • 65.0.3325.181-0ubuntu0.16.04.1
    • 66.0.3359.139-0ubuntu0.16.04.3
    • 66.0.3359.181-0ubuntu0.16.04.1
    • 67.0.3396.99-0ubuntu0.16.04.2
    • 68.0.3440.75-0ubuntu0.16.04.1
    • 68.0.3440.106-0ubuntu0.16.04.1
    • 69.0.3497.81-0ubuntu0.16.04.1
    • 70.0.3538.67-0ubuntu0.16.04.1
    • 70.0.3538.77-0ubuntu0.16.04.1
    • 70.0.3538.110-0ubuntu0.16.04.1
    • 71.0.3578.80-0ubuntu0.16.04.1
    • 71.0.3578.98-0ubuntu0.16.04.1
    • 72.0.3626.119-0ubuntu0.16.04.1
    • 72.0.3626.121-0ubuntu0.16.04.1
    • 73.0.3683.75-0ubuntu0.16.04.1
    • 73.0.3683.86-0ubuntu0.16.04.1
    • 74.0.3729.169-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 76.0.3809.87-0ubuntu0.16.04.1

    Update to 76.0.3809.87-0ubuntu0.16.04.1

  • chromium-browser Ubuntu:18.04:LTS

    Versions
    • 61.0.3163.100-0ubuntu1.1378
    • 62.0.3202.62-0ubuntu0.17.10.1380
    • 62.0.3202.89-0ubuntu1.1386
    • 62.0.3202.94-0ubuntu1.1388
    • 63.0.3239.84-0ubuntu1
    • 63.0.3239.108-0ubuntu1
    • 64.0.3282.119-0ubuntu1
    • 64.0.3282.140-0ubuntu1
    • 64.0.3282.167-0ubuntu1
    • 65.0.3325.146-0ubuntu1
    • 65.0.3325.181-0ubuntu1
    • 66.0.3359.139-0ubuntu0.18.04.3
    • 66.0.3359.181-0ubuntu0.18.04.1
    • 67.0.3396.99-0ubuntu0.18.04.1
    • 68.0.3440.75-0ubuntu0.18.04.1
    • 68.0.3440.106-0ubuntu0.18.04.1
    • 69.0.3497.81-0ubuntu0.18.04.1
    • 70.0.3538.67-0ubuntu0.18.04.1
    • 70.0.3538.77-0ubuntu0.18.04.1
    • 70.0.3538.110-0ubuntu0.18.04.1
    • 71.0.3578.80-0ubuntu0.18.04.1
    • 71.0.3578.98-0ubuntu0.18.04.1
    • 72.0.3626.119-0ubuntu0.18.04.1
    • 72.0.3626.121-0ubuntu0.18.04.1
    • 73.0.3683.75-0ubuntu0.18.04.1
    • 73.0.3683.86-0ubuntu0.18.04.1
    • 74.0.3729.169-0ubuntu0.18.04.1
    • 75.0.3770.90-0ubuntu0.18.04.1
    • 75.0.3770.142-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 76.0.3809.87-0ubuntu0.18.04.1

    Update to 76.0.3809.87-0ubuntu0.18.04.1

Original sources

Check your server →