Candidate: CVE-2019-5767 PublicDate: 2019-02-19 17:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5767 Description: Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [6.5 MEDIUM] Patches_chromium-browser: upstream_chromium-browser: released (72.0.3626.81) precise/esm_chromium-browser: DNE trusty_chromium-browser: ignored (no longer updated) trusty/esm_chromium-browser: DNE (trusty was ignored [no longer updated]) xenial_chromium-browser: released (72.0.3626.119-0ubuntu0.16.04.1) bionic_chromium-browser: released (72.0.3626.119-0ubuntu0.18.04.1) cosmic_chromium-browser: released (72.0.3626.119-0ubuntu0.18.10.1) devel_chromium-browser: released (72.0.3626.81-0ubuntu1)