CVE-2019-5786
Google Chrome Blink Use-After-Free Vulnerability
Published Jun 27, 2019 · updated Jun 16, 2026 · google chrome
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Timeline
Detection, updates, and resolution for this record.
Jun 27, 2019 · Catalog
Detected
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
May 23, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 13, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Required action
Apply updates per vendor instructions.
CISA due date Jun 13, 2022
Affected
- cpe google/chromeversion unspecified
- vendor Google Chrome Blinkversion unspecified
Sources
- CISA KEVCVE-2019-5786
Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.
cisa.gov - CVE.orgCVE-2019-5786
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-5786
30-day exploitation probability 61.1%
first.org - Exploit Database46812
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/chrome_filereader_uaf
Public module reference (manual). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
nvd.nist.gov