Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.1
CVSSv3

CVE-2016-5147

Published: 11/09/2016 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Google

Vulnerability Summary

Blink, as used in Google Chrome prior to 53.0.2785.89 on Windows and OS X and prior to 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote malicious users to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Ubuntu Security Notice: oxide-qt vulnerabilities
Several security issues were fixed in Oxide ...
Debian Security Advisories: DSA-3660-1 chromium-browser -- security update
Several vulnerabilities have been discovered in the chromium web browser CVE-2016-5147 A cross-site scripting issue was discovered CVE-2016-5148 Another cross-site scripting issue was discovered CVE-2016-5149 Max Justicz discovered a script injection issue in extension handling CVE-2016-5150 A use-after-free issue was discovere ...
Red Hat: CVE-2016-5147
Blink, as used in Google Chrome before 530278589 on Windows and OS X and before 530278592 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)" ...
Arch Linux Issues:
Blink, as used in Google Chrome, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)" ...

References

CWE-79https://crbug.com/628942https://codereview.chromium.org/2155393002http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.htmlhttps://codereview.chromium.org/2242923002https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.htmlhttp://www.securityfocus.com/bid/92717http://www.securitytracker.com/id/1036729https://codereview.chromium.org/2169453002https://codereview.chromium.org/2190523002/http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.htmlhttps://codereview.chromium.org/2174263002/http://www.debian.org/security/2016/dsa-3660https://security.gentoo.org/glsa/201610-09http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1854.htmlhttps://codereview.chromium.org/2183423002/https://usn.ubuntu.com/3058-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook