CVE-2019-13748: Medium severity google chrome vulnerability
An insufficient policy enforcement flaw was found in the developer tools component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=993706
External References:
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html
Other sources
Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-13748?
CVE-2019-13748 refers to the vulnerability where insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Which software versions are affected by CVE-2019-13748?
The software versions affected by CVE-2019-13748 are Google Chrome prior to 79.0.3945.79, Debian Linux 9.0 and 10.0, Fedora 30 and 31, and Redhat Enterprise Linux Desktop, Server, and Workstation 6.0.
What is the severity of CVE-2019-13748?
CVE-2019-13748 has a severity value of 6.5, which is classified as medium severity.
How can I fix CVE-2019-13748?
To fix CVE-2019-13748, you should update Google Chrome to version 79.0.3945.79.
Are there any additional references for CVE-2019-13748?
Yes, you can find additional references for CVE-2019-13748 at the following links: [https://code.google.com/p/chromium/issues/detail?id=993706](https://code.google.com/p/chromium/issues/detail?id=993706), [https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html](https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html), [https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1782013](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1782013).