CVE-2019-5816

Published: Jun 27, 2019Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.

Affected (6)

Products: Google: Chrome · Fedoraproject: Fedora · Opensuse: Backports, Leap

1 product

1 product

2 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Chrome	Before 74.0.3729.108

Running on/with	Platform Versions
Google Android	All versions

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 29
Opensuse Backports	Version sle-15
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1
Opensuse Leap	Version 42.3

Related CWEs

CWE-664

Improper Control of a Resource Through its Lifetime

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.