CVE-2019-13767: Debian Linux

High severity, CVSS 8.8. EPSS: 15.5% chance of exploitation in the next 30 days.

Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 30 only
• Google Chrome: before 79.0.3945.88 (fixed in 79.0.3945.88)
• Opensuse Backports Sle: version 15.0 only

Published 2020-01-10. Last modified 2026-06-17.