CVE-2019-13720

Timeline

Detection, updates, and resolution for this record.

1. Nov 25, 2019 · Catalog

   Detected

   Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

2. May 23, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Jun 13, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected

• cpe google/chromeversion unspecified
• cpe opensuse/leap15.1
• vendor Google Chrome WebAudioversion unspecified

Sources

• CISA KEVCVE-2019-13720

  Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  cisa.gov
• CVE.orgCVE-2019-13720

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2019-13720

  30-day exploitation probability 49.4%

  first.org
• Exploit Database50917

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• NIST NVDCVE-2019-13720

  Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  nvd.nist.gov
• Packet Storm Securityhttp://packetstormsecurity.com/files/167066/Google-Chrome-78.0.3904.70-Remote-Code-Execution.html

  Packet Storm link already published on the finding.

  packetstormsecurity.com

References

• Mailing List · lists.opensuse.org
• Exploit · packetstormsecurity.com
• Vendor Advisory · chromereleases.googleblog.com
• Permissions Required · crbug.com
• CISA note · nvd.nist.gov
• Third Party Advisory · security.gentoo.org