Chrome 73.0.3683.75 Security Update: 30 CVEs including RCE and UAF

From the screenshot, the following key information about the vulnerability can be obtained: Release Date: March 12, 2019 Chrome Version: Chrome 73.0.3683.75 Number of Vulnerabilities: A total of 30 security fixes, including: - High Severity (13 vulnerabilities): - CVE-2019-5787: Use-after-free in Canvas - CVE-2019-5788: Use-after-free in FileAPI - CVE-2019-5789: Use-after-free in WebMIDI - CVE-2019-5790: Heap buffer overflow in V8 - CVE-2019-5791: Type confusion in V8 - CVE-2019-5792: Integer overflow in PDFium - CVE-2019-5793: Excessive private API permissions in extensions - CVE-2019-5794: Security UI spoofing - CVE-2019-5795: Integer overflow in PDFium - CVE-2019-5796: Race condition in extensions - CVE-2019-5797: Race condition in DOMStorage - CVE-2019-5798: Out-of-bounds read in Skia - CVE-2019-5799: CSP bypass with Blob URL - Medium Severity (9 vulnerabilities): - CVE-2019-5800: CSP bypass with Blob URL - CVE-2019-5801: Omnibox display issue on iOS - CVE-2019-5802: Security UI spoofing - CVE-2019-5803: CSP bypass with JavaScript URL - CVE-2019-5804: Command injection via command line on Windows - Low Severity (3 vulnerabilities) Vulnerability Rewards: - Ranging from $500 to $1000, depending on severity and impact. Detection Tools: - Utilized AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL to detect vulnerabilities. Reporters: - Researchers from various companies and organizations, including Chengdu Security Response Center, Google Project Zero, Blue Frost Security, Naver Corporation, etc.

Goal Reached Thanks to every supporter — we hit 100%!

Chrome 73.0.3683.75 Security Update: 30 CVEs including RCE and UAF