Live › vulnerability › CVE-2019-13720
Go to dashboardGoogle Chrome's WebAudio component has a use-after-free bug that corrupts heap memory when a page is crafted to trigger it. A remote attacker who gets a victim to load a malicious HTML page can potentially run code in the browser.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Google Chrome WebAudio | vendor | – | – |
Open chrome://version in each browser install and compare the version to the fixed release in the vendor advisory; sources do not give a version number.
Update Google Chrome to the latest stable release per vendor instructions; the exact fixed version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-13720")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.