Description
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google Chrome
unspecified to < 72.0.3626.81affected
References
- http://www.securityfocus.com/bid/106767 ↗
- https://crbug.com/891697 ↗
- https://access.redhat.com/errata/RHSA-2019:0309 ↗
- https://www.debian.org/security/2019/dsa-4395 ↗
- https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/ ↗