4.3
CVSSv2

CVE-2016-5172

Published: 25/09/2016 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

The parser in Google V8, as used in Google Chrome prior to 53.0.2785.113, mishandles scopes, which allows remote malicious users to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

nodejs node.js

debian debian linux 8.0

debian debian linux 9.0

Vendor Advisories

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...
Several security issues were fixed in Oxide ...
Several vulnerabilities have been discovered in the chromium web browser CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit CVE-2016-5172 Choongwoo Han discovered an information leak in the v8 javascript library CVE-2016-5173 A resour ...
The parser in Google V8, as used in Google Chrome before 5302785113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code ...
The parser in Google V8 mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code ...