Google Chrome Blink Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 23/05/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 72.0.3626.121 | 72.0.3626.121 |
| puppeteer | < 1.13.0 | 1.13.0 |
Versions of puppeteer prior to 1.13.0 are vulnerable to the Use-After-Free vulnerability in Chromium (CVE-2019-5786). The Chromium FileReader API is vulnerable to Use-After-Free which may lead to Remote Code Execution.
Upgrade to version 1.13.0 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free