CVE-2019-5767

Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.

Link	Resource
https://crbug.com/902427	Exploit Issue Tracking
https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html	Vendor Advisory
https://www.debian.org/security/2019/dsa-4395	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0309	Third Party Advisory
http://www.securityfocus.com/bid/106767	Third Party Advisory VDB Entry
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/	Mailing List Release Notes
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/	Third Party Advisory

Configuration 1

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

---

Published : 2019-02-19 05:29

Updated : 2020-08-24 05:37

---

NVD link : CVE-2019-5767

Mitre link : CVE-2019-5767

No products.

CWE-1021

Improper Restriction of Rendered UI Layers or Frames