Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esr | Aug 22, 2024 | May 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | Apr 27, 2020 | May 23, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 23, 2019 |
| Centos_linux | — | Upgrade chromium-browserUpgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade chromium-browser-debuginfo | May 31, 2019 | Mar 17, 2019 |
| Debian | — | Upgrade thunderbirdUpgrade chromiumUpgrade firefox-esr | Apr 1, 2019 | Apr 1, 2019 |
| Gentoo Linux | — | Upgrade www-client/chromium. | Mar 29, 2019 | Mar 28, 2019 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | May 30, 2019 | Mar 12, 2019 |
| Mfsa2019 14 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 60.7 | May 22, 2019 | May 21, 2019 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 60.7 | May 23, 2019 | May 21, 2019 |
| Oracle Solaris | — | Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade web/browser/firefox to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | May 24, 2019 | Mar 12, 2019 |
| Redhat_linux | — | Upgrade firefox-debugsourceUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade thunderbird | Apr 8, 2019 | Apr 8, 2019 |
| Suse | — | Upgrade chromedriverUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade chromiumUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-buildsymbols | Mar 19, 2019 | Mar 17, 2019 |
| Ubuntu | — | Upgrade thunderbird | May 29, 2019 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub