CVE-2019-13768
Google Chrome vulnerability analysis and mitigation

Overview

A high-severity use-after-free vulnerability in FileAPI was discovered in Google Chrome versions prior to 72.0.3626.81. The vulnerability, identified as CVE-2019-13768, was reported by Mark Brand of Google Project Zero on January 16, 2019. This security flaw could potentially allow remote attackers to perform sandbox escape attacks through specially crafted HTML pages (Chrome Release, NVD).

Technical details

The vulnerability is classified as a use-after-free flaw specifically affecting the FileAPI component of Google Chrome. Use-after-free vulnerabilities occur when a program continues to use a pointer after it has been freed, which can lead to arbitrary code execution. The issue was deemed high severity by the Chrome security team (Chrome Release).

Impact

The vulnerability could allow remote attackers to potentially escape the Chrome sandbox environment through a specially crafted HTML page. Sandbox escape vulnerabilities are particularly serious as they can potentially lead to broader system access beyond the browser's confined environment (NVD).

Mitigation and workarounds

Google addressed this vulnerability in Chrome version 72.0.3626.81. Users were advised to update their Chrome browsers to this version or later to receive the security fix. The update was rolled out for Windows, Mac, and Linux platforms (Chrome Release).

Additional resources


SourceThis report was generated using AI

Related Google Chrome vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-13230HIGH8.8
  • Google ChromeGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesNov 18, 2025
CVE-2025-13229HIGH8.8
  • Google ChromeGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesNov 18, 2025
CVE-2025-13228HIGH8.8
  • Google ChromeGoogle Chrome
  • chromium
NoYesNov 18, 2025
CVE-2025-13227HIGH8.8
  • Google ChromeGoogle Chrome
  • chromium
NoYesNov 18, 2025
CVE-2025-13992MEDIUM4.7
  • Google ChromeGoogle Chrome
  • chromium
NoYesDec 03, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management