2019 CVE Vulnerabilities
17,621 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-5853 | HIGH | 8.8 | 1.0% | Nov 25, 2019 | Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potential... |
| CVE-2019-5852 | MEDIUM | 6.5 | 1.1% | Nov 25, 2019 | Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain po... |
| CVE-2019-5851 | HIGH | 8.8 | 0.9% | Nov 25, 2019 | Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap ... |
| CVE-2019-5850 | CRITICAL | 9.6 | 1.0% | Nov 25, 2019 | Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the ... |
| CVE-2019-5849 | HIGH | 8.1 | 1.4% | Nov 25, 2019 | Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensit... |
| CVE-2019-5848 | MEDIUM | 6.5 | 0.5% | Nov 25, 2019 | Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentia... |
| CVE-2019-5847 | MEDIUM | 6.5 | 0.9% | Nov 25, 2019 | Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentia... |
| CVE-2019-5842 | MEDIUM | 6.5 | 0.7% | Nov 25, 2019 | Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2019-17405 | MEDIUM | 6.1 | 0.7% | Nov 25, 2019 | Nokia IMPACT < 18A: has Reflected self XSS |
| CVE-2019-17404 | MEDIUM | 4.3 | 1.0% | Nov 25, 2019 | Nokia IMPACT < 18A: allows full path disclosure |
| CVE-2019-17403 | HIGH | 8.8 | 2.5% | Nov 25, 2019 | Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution. |
| CVE-2019-13724 | HIGH | 8.8 | 1.4% | Nov 25, 2019 | Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had co... |
| CVE-2019-13723 | HIGH | 8.8 | 1.5% | Nov 25, 2019 | Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the... |
| CVE-2019-13721 | HIGH | 8.8 | 1.1% | Nov 25, 2019 | Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap co... |
| CVE-2019-13720 | HIGH | 8.8 | 73.0% | Nov 25, 2019 | Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap ... |
| CVE-2019-13719 | MEDIUM | 4.3 | 1.2% | Nov 25, 2019 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide secur... |
| CVE-2019-13718 | MEDIUM | 4.3 | 0.9% | Nov 25, 2019 | Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform doma... |
| CVE-2019-13717 | MEDIUM | 4.3 | 1.0% | Nov 25, 2019 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide secur... |
| CVE-2019-13716 | MEDIUM | 4.3 | 0.9% | Nov 25, 2019 | Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to b... |
| CVE-2019-13715 | MEDIUM | 4.3 | 0.8% | Nov 25, 2019 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker t... |
| CVE-2019-13714 | MEDIUM | 6.1 | 0.8% | Nov 25, 2019 | Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a ... |
| CVE-2019-13713 | MEDIUM | 6.5 | 1.1% | Nov 25, 2019 | Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak c... |
| CVE-2019-13711 | MEDIUM | 5.3 | 1.2% | Nov 25, 2019 | Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak c... |
| CVE-2019-13710 | MEDIUM | 4.3 | 1.0% | Nov 25, 2019 | Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker... |
| CVE-2019-13709 | MEDIUM | 6.5 | 1.0% | Nov 25, 2019 | Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now