CVE-2019-5832: Medium severity google chrome vulnerability
Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-5832?
CVE-2019-5832 is a vulnerability in Google Chrome prior to 75.0.3770.80 that allows a remote attacker to leak cross-origin data via a crafted HTML page.
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker by creating a specially crafted HTML page.
What is the severity of CVE-2019-5832?
The severity of CVE-2019-5832 is medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2019-5832?
Google Chrome prior to version 75.0.3770.80, Opensuse Backports, openSUSE Leap 15.0, openSUSE Leap 15.1, openSUSE Leap 42.3, Debian Debian Linux 10.0, Fedoraproject Fedora 29, Fedoraproject Fedora 30, and Chromium versions 90.0.4430.212-1~deb10u1, 116.0.5845.180-1~deb11u1, 119.0.6045.199-1~deb11u1, 116.0.5845.180-1~deb12u1, 119.0.6045.199-1~deb12u1, 119.0.6045.159-1, and 119.0.6045.199-1 are affected by this vulnerability.
How do I fix CVE-2019-5832?
To fix CVE-2019-5832, update Google Chrome to version 75.0.3770.80 or later, or update Chromium to versions 90.0.4430.212-1~deb10u1, 116.0.5845.180-1~deb11u1, 119.0.6045.199-1~deb11u1, 116.0.5845.180-1~deb12u1, 119.0.6045.199-1~deb12u1, 119.0.6045.159-1, or 119.0.6045.199-1 depending on your operating system.