CVE-2016-5192 PUBLISHED

Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.

EPSS 0.24% · 47.3th percentile

Risk Scores

EPSS Score
0.24%
47.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSoxide-qt1.17.9-0ubuntu0.16.04.1, 1.17.7-0ubuntu0.16.04.1, 1.16.5-0ubuntu0.16.04.1
Ubuntu:14.04:LTSchromium-browser45.0.2454.101-0ubuntu0.14.04.1.1099, 47.0.2526.73-0ubuntu0.14.04.1.1106, 47.0.2526.106-0ubuntu0.14.04.1.1107
Ubuntu:14.04:LTSoxide-qt1.14.7-0ubuntu0.14.04.1, 1.7.9-0ubuntu0.14.04.1, 1.8.4-0ubuntu0.14.04.2
Ubuntu:16.04:LTSchromium-browser0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218

Timeline

References

Open in Interactive Console →