Vulnerability Spotlight: Google V8 Array.prototype memory corruption vulnerability
Summary: Cisco Talos reported a memory corruption vulnerability in Google's V8 JavaScript engine, tracked as TALOS-2019-0791/CVE-2019-5831, that a specific JavaScript code can trigger in V8 version 7.3.492.17 and potentially abuse for remote code execution. Google initially fixed the flaw in March and merged it in April, then publicly disclosed it on June 26, and Talos confirmed version 7.3.492.17 is affected while noting Snort rules 49442 and 49443 detect exploitation attempts.
Why it matters: Triggering this in a browser only requires the victim to visit a malicious web page, so the exposure runs through ordinary browsing rather than a targeted install. The fix existed in March but disclosure waited until June 26, leaving a window in which the flaw was patched but not publicly known.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5831
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026