{"vulnerability": "cve-2019-5786", "sightings": [{"uuid": "c3ef31fd-7921-4590-9f49-864958611d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "da47fe56-d645-4f5c-a955-9a9f825a3c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://www.exploit-db.com/exploits/46812", "content": "", "creation_timestamp": "2019-05-08T00:00:00.000000Z"}, {"uuid": "2010d9e8-9cd6-4976-83e1-46b9f66a3f0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "MISP/6f1cf1f7-0199-49b7-ba3e-d301f0372930", "content": "", "creation_timestamp": "2024-11-14T06:10:02.000000Z"}, {"uuid": "395e8174-e790-4098-883f-ba092be3a0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971558", "content": "", "creation_timestamp": "2024-12-24T20:31:06.778028Z"}, {"uuid": "febec06e-cdb0-41fd-af97-ba191b53e2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "30b3ff5f-8f68-4e86-907f-1dfa54d2e9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:16.000000Z"}, {"uuid": "a0cf6827-5107-4875-91b3-cf3cbd0eaa16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:24.000000Z"}, {"uuid": "f1e961b9-a2ba-4f42-a000-d328bedbe1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:50.000000Z"}, {"uuid": "fa1110fd-6e63-4bb4-933c-20f034b592f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/chrome_filereader_uaf.rb", "content": "", "creation_timestamp": "2019-05-08T16:41:01.000000Z"}, {"uuid": "5bad00ed-8f2c-4bf9-8cd6-009c4080afff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=370", "content": "", "creation_timestamp": "2019-03-07T04:00:00.000000Z"}, {"uuid": "69d93d01-f87e-48b0-b239-b43ea8822171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab4ac466-8a55-4c55-9b57-8caa60ccde14", "content": "", "creation_timestamp": "2026-02-02T12:27:44.930792Z"}, {"uuid": "9ee45ddc-3660-4337-a67f-ac47764ab0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/N0iSeBit/230", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0444\u0430\u043a\u0442, \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2019-5786, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0445\u0440\u043e\u043c\u0430. \u041e \u0447\u0435\u043c \u0413\u0443\u0433\u043b \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0431\u043b\u043e\u0433 \u043f\u043e\u0441\u0442 (https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html).\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438: https://blog.edgespot.io/2019/02/edgespot-detects-pdf-zero-day-samples.html\n\n\u041f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0430 \u0432 \u0442\u0440\u0435\u043a\u0435\u0440\u0435 \u0433\u0443\u0433\u043b\u0430: https://bugs.chromium.org/p/chromium/issues/detail?id=917897", "creation_timestamp": "2019-03-07T03:41:42.000000Z"}, {"uuid": "20aee46e-d572-4cc1-a30d-86c3586f5837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "published-proof-of-concept", "source": "https://t.me/antichat/4116", "content": "Exodus Intelligence \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u043a\u0440\u0443\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u043f\u0440\u043e \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2019-5786: \nhttps://blog.exodusintel.com/2019/02/20/cve-2019-5786-analysis-and-exploitation/\n\n\u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c (\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u2014no-sandbox):\n\nhttps://github.com/exodusintel/CVE-2019-5786", "creation_timestamp": "2019-03-23T16:54:47.000000Z"}, {"uuid": "cf1cd53f-6183-484a-a9c2-155cd73aa443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/antichat/3911", "content": "1 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 Chromium\u2019\u0430, \u0433\u0434\u0435 \u0431\u044b\u043b \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 use-after-free \u0443\u0432\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 FileReader - CVE-2019-5786. \nhttps://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html?m=1\n\n6-7 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e\u0434\u043d\u044f\u043b\u0441\u044f \u0445\u0430\u0439\u043f, \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438, \u0447\u0442\u043e in the wild \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 sandbox escape\u2019\u043e\u043c.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0438\u043a\u0441: https://chromium.googlesource.com/chromium/src/+/150407e8d3610ff25a45c7c46877333c4425f062, \u0442\u043e \u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d memory corruption, \u0430 \u0434\u043b\u044f \u0437\u0430\u0448\u0438\u0442\u044b \u043e\u0442 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043d\u043e. \u042d\u0442\u043e \u0432\u0441\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b.\n\n\u0425\u043e\u0440\u043e\u0448\u043e, \u0447\u0442\u043e 7 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0442 Google \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e 2. \u041e\u0434\u043d\u0430 -  uaf \u0432 \u0445\u0440\u043e\u043c\u0438\u0443\u043c\u0435, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f - null pointer dereference \u0432 Windows 7 x32:  https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html. \n\n\u041c\u043e\u0440\u0430\u043b\u044c - \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0439\u0442\u0435 \u0444\u0438\u043a\u0441\u044b,  \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0442\u0430\u043a \u0441\u0442\u0440\u0430\u0448\u043d\u0430 \u0431\u0430\u0433\u0430, \u043a\u0430\u043a \u043e \u043d\u0435\u0439 \u043f\u0438\u0448\u0443\u0442.", "creation_timestamp": "2019-03-10T14:54:59.000000Z"}, {"uuid": "5390c9bc-ca58-4a2e-99d6-c0b6220f0d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "published-proof-of-concept", "source": "https://t.me/R0_Crew/1017", "content": "Analysis of a Chrome Zero Day: CVE-2019-5786\n\nhttps://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/analysis-of-a-chrome-zero-day-cve-2019-5786/\n\n#re #expdev #browser #filereader #win32 #darw1n", "creation_timestamp": "2019-04-09T01:06:32.000000Z"}, {"uuid": "5465470b-0450-4f4b-a665-ff81cf1d1826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/itsec_news/11", "content": "\u041f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 6 \u043c\u0430\u0440\u0442\u0430 2019 \u0433\u043e\u0434\u0430\n\n\u26a1\ufe0f \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-5786) \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043e\u0431\u043e\u0437\u0440\u0435\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c - Microsoft Windows, Apple macOS \u0438 Linux.    \nhttps://www.securitylab.ru/news/498232.php\n\nZerodium \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u043e 500 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f Hyper-V \u0438 vSphere\nhttps://xakep.ru/2019/03/06/zerodium-hypervisors/\n\n\u0424\u0421\u0411 \u0437\u0430\u0434\u0435\u0440\u0436\u0430\u043b\u0430 \u043a\u043e\u0432\u0440\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0430, \u0432\u0437\u043b\u043e\u043c\u0430\u0432\u0448\u0435\u0433\u043e \u0441\u0430\u0439\u0442 \u0420\u0410\u041d\u0425\u0438\u0413\u0421\nhttps://progorod33.ru/news/47472\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0445\u0438\u0449\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u0440\u0442 \u0447\u0435\u0440\u0435\u0437 \u0444\u0435\u0439\u043a\u043e\u0432\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 AvitoPay\nhttps://bankir.ru/novosti/20190306/khakery-pokhishchali-dannye-kart-cherez-feikovoe-prilozhenie-avitopay-10156510/\n\n\u26a1\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android \u0443\u043b\u0438\u0447\u0438\u043b\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435\nhttps://life.ru/t/\u0433\u0430\u0434\u0436\u0435\u0442\u044b/1198790/populiarnyie_prilozhieniia_dlia_android_ulichili_v_shpionazhie\n\n\u0418\u0411-\u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u041f\u0430\u0442\u0440\u0438\u043a \u0423\u043e\u0440\u0434\u043b (Patrick Wardle) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438\u043d\u043d\u043e\u0432\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0430 Mac. \nhttps://www.securitylab.ru/news/498236.php\n\n\u00ab\u041f\u0438\u0440\u0430\u0442\u0441\u043a\u0430\u044f \u043c\u0430\u0442\u0440\u0435\u0448\u043a\u0430\u00bb \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 The Pirate Bay\nhttps://www.securitylab.ru/news/498234.php", "creation_timestamp": "2019-03-06T18:07:21.000000Z"}, {"uuid": "0e244ea1-85db-4162-809a-7cdf4e6f389a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/alexmakus/2696", "content": "\u0412\u0447\u0435\u0440\u0430 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a Chrome \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0441 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u043c \u0438 \u043b\u0435\u0433\u043a\u043e \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043d\u043e\u043c\u0435\u0440\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 72.0.3626.121. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0430\u043f\u0434\u0435\u0439\u0442 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2019-5786, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0441\u0430\u0439\u0442\u0430\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f FileReader API, \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0411\u0440\u0430\u0443\u0437\u0435\u0440 \u043a\u0440\u0430\u0439\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a \u0430\u043f\u0434\u0435\u0439\u0442\u0443, \u0435\u0441\u043b\u0438 \u043e\u043d \u0443 \u0432\u0430\u0441 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f.\nhttps://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html", "creation_timestamp": "2019-03-07T04:42:27.000000Z"}, {"uuid": "b20881f6-9c71-4411-9b07-e212871254c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/br0wsec/77", "content": "1 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 Chromium\u2019\u0430, \u0433\u0434\u0435 \u0431\u044b\u043b \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 use-after-free \u0443\u0432\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 FileReader - CVE-2019-5786. \nhttps://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html?m=1\n\n6-7 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e\u0434\u043d\u044f\u043b\u0441\u044f \u0445\u0430\u0439\u043f, \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438, \u0447\u0442\u043e in the wild \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 sandbox escape\u2019\u043e\u043c.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0438\u043a\u0441: https://chromium.googlesource.com/chromium/src/+/150407e8d3610ff25a45c7c46877333c4425f062, \u0442\u043e \u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d memory corruption, \u0430 \u0434\u043b\u044f \u0437\u0430\u0448\u0438\u0442\u044b \u043e\u0442 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043d\u043e. \u042d\u0442\u043e \u0432\u0441\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b.\n\n\u0425\u043e\u0440\u043e\u0448\u043e, \u0447\u0442\u043e 7 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0442 Google \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e 2. \u041e\u0434\u043d\u0430 -  uaf \u0432 \u0445\u0440\u043e\u043c\u0438\u0443\u043c\u0435, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f - null pointer dereference \u0432 Windows 7 x32:  https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html. \n\n\u041c\u043e\u0440\u0430\u043b\u044c - \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0439\u0442\u0435 \u0444\u0438\u043a\u0441\u044b,  \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u0442\u0430\u043a \u0441\u0442\u0440\u0430\u0448\u043d\u0430 \u0431\u0430\u0433\u0430, \u043a\u0430\u043a \u043e \u043d\u0435\u0439 \u043f\u0438\u0448\u0443\u0442.", "creation_timestamp": "2019-03-10T08:53:25.000000Z"}, {"uuid": "53d5a4f8-c6cd-4deb-9153-2976a65ba36d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/80", "content": "Exodus Intelligence \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u043a\u0440\u0443\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u043f\u0440\u043e \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2019-5786: \nhttps://blog.exodusintel.com/2019/02/20/cve-2019-5786-analysis-and-exploitation/\n\n\u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c (\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u2014no-sandbox):\n\nhttps://github.com/exodusintel/CVE-2019-5786", "creation_timestamp": "2019-03-23T16:16:19.000000Z"}, {"uuid": "15714bd9-a7a0-4b07-b578-1f5e90c48f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/ctinow/8740", "content": "Chrome 72.0.3626.121 for Linux, Windows, and macOS released. Fixes CVE-2019-5786: Use-after-free in FileReader. Not much else of interest.\nhttps://t.co/f39cPdue8B http://twitter.com/BleepinComputer/status/1101606240566824961", "creation_timestamp": "2019-03-01T23:16:24.000000Z"}, {"uuid": "99d603de-104e-4c9b-90e2-722d39af85a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "Telegram/P_55f7pUPwNGZYKZLITK3vBvWiQOl5osYzrDkDElL9CvSnMR", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "508017fa-bdf6-4316-96fc-dba77f0682b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/KaitNews/8263", "content": "\u26a0\ufe0f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc zero day \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645.\n\n\u06af\u0648\u06af\u0644 \u0645\u06cc \u06af\u0648\u06cc\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0634\u062f\u06cc\u062f \u0627\u0633\u062a \u0648 \u0641\u0639\u0644\u0627 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0646\u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u067e\u0633\u062a \u0648\u0628\u0644\u0627\u06af \u06af\u0648\u06af\u0644 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0622\u0646 \u0631\u0627 \"CVE-2019-5786: Use-after-free \u062f\u0631 FileReader\" \u0645\u06cc \u0646\u0627\u0645\u062f.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0634\u0627\u0645\u0644 API Chrome FileReader \u0627\u0633\u062a. \u0648 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0645\u062d\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f \u0648 \u0628\u0631\u0627\u062d\u062a\u06cc \u0642\u0627\u062f\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u06cc \u0628\u0627\u0634\u062f. \u062f\u0631 \u062a\u0645\u0627\u0645 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0647\u0627 \u0645\u0627\u0646\u0646\u062f \u0644\u06cc\u0646\u0648\u06a9\u0633\u060c \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 \u0645\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc  \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0628\u0627\u0634\u062f.\n\n@KaitNews", "creation_timestamp": "2026-07-30T00:03:18.603600Z"}, {"uuid": "07aac412-69df-4dc4-8923-dc10e8b0fc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/thehackernews/213", "content": "\u26a0\ufe0f Important \u2014 Update your Google Chrome immediately to patch a new high-severity 0-day RCE vulnerability (CVE-2019-5786) that hackers are actively exploiting in the wild\n\nhttps://thehackernews.com/2019/03/update-google-chrome-hack.html\n\nPatched Chrome version 72.0.3626.121 has been released for Windows, macOS, Linux", "creation_timestamp": "2019-03-06T10:58:20.000000Z"}, {"uuid": "7b06bc93-47da-45dc-91b6-63746081cc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/itsecalert/120", "content": "\u26a0\ufe0fChrome/Chromium zero-day RCE (CVE-2019-5786), actively exploited in the wild. Affected Versions: < 72.0.3626.121\n\nInformation is beginning to circulate regarding CVE-2019-5786, a use-after-free (UAF) vulnerability in Chrome's FileReader API.  The Chrome security team has indicated that it is being actively exploited in the wild.  Details are limited, but the vulnerability is believed to permit remote code execution (RCE).\n\nSome news sources have conflated this with another, less severe issue spotted by EdgeSpot relating to PDF files.  Both EdgeSpot and Google have indicated that the issues are unrelated.\n\nCVE-2019-5786 has been patched in Chrome version 72.0.3626.121, currently available on the stable channel.  Other Chromium-based browsers, such as Vivaldi, may or may not be affected.\n\n(Severity: \ud83d\udd38high)\n\nAdditional information:\n\n- Announcement from Google: https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html\n- Chromium bug (not yet public): https://bugs.chromium.org/p/chromium/issues/detail?id=936448\n- Tweet from a Chrome security engineer: https://twitter.com/justinschuh/status/1103087046661267456\n- Patch: https://github.com/chromium/chromium/blob/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449/third_party/blink/renderer/platform/wtf/typed_arrays/array_buffer_builder.h#L63-L67\n- Patch review: https://chromium-review.googlesource.com/c/1492873 and https://chromium-review.googlesource.com/c/1495209\n- Technical explanation: https://news.ycombinator.com/item?id=19325083\n- Sophos: https://nakedsecurity.sophos.com/2019/03/06/serious-chrome-zero-day-google-says-update-right-this-minute/\n- Forbes (conflates CVE-2019-5786 and the PDF issue reported by EdgeSpot): https://www.forbes.com/sites/daveywinder/2019/03/07/google-confirms-serious-chrome-security-problem-heres-how-to-fix-it/\n\n#alert #severityHigh #vulnerability #browser #chrome #rce #uaf #CVE20195786", "creation_timestamp": "2019-03-07T18:04:36.000000Z"}, {"uuid": "9f42d969-92bd-4750-9f7f-87e3e660962a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/itsecalert/121", "content": "\u26a0\ufe0fChrome and Windows zero-day update, including CVE-2019-5786\n\nGoogle has issued a more detailed announcement regarding CVE-2019-5786.  This announcement includes new information about how the vulnerability was being exploited in the wild.  The Chrome exploit was combined with a Windows 7 zero-day that remains unpatched.  The Windows vulnerability permits local privilege escalation.\n\nGoogle believes that security additions in Windows 10 makes attacks against the newer OS unrealistic, if not impossible:\n\n\"We strongly believe this vulnerability may only be exploitable on Windows 7 due to recent exploit mitigations added in newer versions of Windows. To date, we have only observed active exploitation against Windows 7 32-bit systems.\"\n\nAs it's likely that no patch will be available for the Windows 7 vulnerability for some time, Google's only mitigation advice is to upgrade to Windows 10:\n\n\"As mitigation advice for this vulnerability users should consider upgrading to Windows 10 if they are still running an older version of Windows, and to apply Windows patches from Microsoft when they become available. We will update this post when they are available.\"\n\nNo IOCs or alternative mitigations have been disclosed.\n\n(Severity: \ud83d\udd38high)\n\nAnnouncement: https://security.googleblog.com/2019/03/disclosing-vulnerabilities-to-protect.html\n\n#alert #severityHigh #vulnerability #browser #chrome #windows #rce #uaf #privilegeEscalation #exploitedNow #zeroDay #CVE20195786", "creation_timestamp": "2019-03-08T05:38:46.000000Z"}, {"uuid": "98cc5602-c9ed-48ae-ae67-6dee3eb6a4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/SecLabNews/4419", "content": "\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-5786) \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043e\u0431\u043e\u0437\u0440\u0435\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c - Microsoft Windows, Apple macOS \u0438 Linux.    \n\u0412 Google Chrome \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0Day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2019-03-06T11:57:04.000000Z"}, {"uuid": "bea149e7-5899-4630-ae99-a7a6d4dbd56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/SecLabNews/4435", "content": "Google \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-5786) \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Chrome 72.0.3626.121 \u0434\u043b\u044f Windows, Mac \u0438 Linux. \u041a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0432\u044b\u0448\u0435\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0431\u0430\u0433\u043e\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u041e\u0421 Windows 7 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438.    \nGoogle \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e 0Day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows 7", "creation_timestamp": "2019-03-09T10:18:16.000000Z"}, {"uuid": "6294018a-672c-4aef-ba89-893b39a052ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://t.me/secinfosex/33", "content": "\u26a0\ufe0f\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 Google Chrome \u0434\u043e 80.0.3987.122\n\nCVE-2020-6418: type confusion vulnerability in V8, Google Chrome\u2019s open-source JavaScript and WebAssembly engine. It was discovered and reported by Cl\u00e9ment Lecigne, security engineer of Google\u2019s Threat Analysis Group (TAG). Last year, Lecigne was credited with finding and reporting CVE-2019-5786, a use-after-free vulnerability in Google Chrome that was also exploited in the wild.\n\nhttps://www.tenable.com/blog/cve-2020-6418-google-chrome-type-confusion-vulnerability-exploited-in-the-wild\n\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1053604\n\n#chrome #exploit #in_the_wild", "creation_timestamp": "2020-02-26T02:58:18.000000Z"}, {"uuid": "0e159db6-4d75-4d29-ba17-828709124b3d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b4e90ed-0c54-45bd-b166-5be22506a543", "content": "", "creation_timestamp": "2026-06-19T12:47:15.317124Z"}, {"uuid": "f61afb80-5f5b-4c14-8a2e-a9855467cab7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/93ddfcd9-bbda-45b3-a304-bac6debe01ff", "content": "", "creation_timestamp": "2026-06-23T14:05:22.539778Z"}, {"uuid": "7cb76358-6878-4012-9290-4c32da67919e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/KaitNews/8263", "content": "\u26a0\ufe0f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc zero day \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645.\n\n\u06af\u0648\u06af\u0644 \u0645\u06cc \u06af\u0648\u06cc\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0634\u062f\u06cc\u062f \u0627\u0633\u062a \u0648 \u0641\u0639\u0644\u0627 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0646\u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u067e\u0633\u062a \u0648\u0628\u0644\u0627\u06af \u06af\u0648\u06af\u0644 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0622\u0646 \u0631\u0627 \"CVE-2019-5786: Use-after-free \u062f\u0631 FileReader\" \u0645\u06cc \u0646\u0627\u0645\u062f.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0634\u0627\u0645\u0644 API Chrome FileReader \u0627\u0633\u062a. \u0648 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0645\u062d\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f \u0648 \u0628\u0631\u0627\u062d\u062a\u06cc \u0642\u0627\u062f\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u06cc \u0628\u0627\u0634\u062f. \u062f\u0631 \u062a\u0645\u0627\u0645 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0647\u0627 \u0645\u0627\u0646\u0646\u062f \u0644\u06cc\u0646\u0648\u06a9\u0633\u060c \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 \u0645\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc  \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0628\u0627\u0634\u062f.\n\n@KaitNews", "creation_timestamp": "2026-07-26T07:01:51.412655Z"}, {"uuid": "8efed9f2-90ae-464a-aca6-901d0f797f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/KaitNews/8263", "content": "\u26a0\ufe0f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc zero day \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645.\n\n\u06af\u0648\u06af\u0644 \u0645\u06cc \u06af\u0648\u06cc\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0634\u062f\u06cc\u062f \u0627\u0633\u062a \u0648 \u0641\u0639\u0644\u0627 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0646\u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u067e\u0633\u062a \u0648\u0628\u0644\u0627\u06af \u06af\u0648\u06af\u0644 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0622\u0646 \u0631\u0627 \"CVE-2019-5786: Use-after-free \u062f\u0631 FileReader\" \u0645\u06cc \u0646\u0627\u0645\u062f.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0634\u0627\u0645\u0644 API Chrome FileReader \u0627\u0633\u062a. \u0648 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0645\u062d\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f \u0648 \u0628\u0631\u0627\u062d\u062a\u06cc \u0642\u0627\u062f\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u06cc \u0628\u0627\u0634\u062f. \u062f\u0631 \u062a\u0645\u0627\u0645 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0647\u0627 \u0645\u0627\u0646\u0646\u062f \u0644\u06cc\u0646\u0648\u06a9\u0633\u060c \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 \u0645\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc  \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0628\u0627\u0634\u062f.\n\n@KaitNews", "creation_timestamp": "2026-07-27T00:01:34.574447Z"}, {"uuid": "150963c7-a7e2-41fa-bbde-9fb7a20b6c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5786", "type": "seen", "source": "https://t.me/KaitNews/8263", "content": "\u26a0\ufe0f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc zero day \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645.\n\n\u06af\u0648\u06af\u0644 \u0645\u06cc \u06af\u0648\u06cc\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0634\u062f\u06cc\u062f \u0627\u0633\u062a \u0648 \u0641\u0639\u0644\u0627 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0646\u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u067e\u0633\u062a \u0648\u0628\u0644\u0627\u06af \u06af\u0648\u06af\u0644 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0622\u0646 \u0631\u0627 \"CVE-2019-5786: Use-after-free \u062f\u0631 FileReader\" \u0645\u06cc \u0646\u0627\u0645\u062f.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0634\u0627\u0645\u0644 API Chrome FileReader \u0627\u0633\u062a. \u0648 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0645\u062d\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f \u0648 \u0628\u0631\u0627\u062d\u062a\u06cc \u0642\u0627\u062f\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u06a9\u0627\u0631\u0628\u0631 \u0645\u06cc \u0628\u0627\u0634\u062f. \u062f\u0631 \u062a\u0645\u0627\u0645 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0647\u0627 \u0645\u0627\u0646\u0646\u062f \u0644\u06cc\u0646\u0648\u06a9\u0633\u060c \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 \u0645\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc  \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0628\u0627\u0634\u062f.\n\n@KaitNews", "creation_timestamp": "2026-07-29T03:00:04.426542Z"}]}