CVE-2016-5198 PUBLISHED KEV

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

EPSS 77.91% · 99.0th percentile

Risk Scores

EPSS Score
77.91%
99.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibv8-3.143.14.5.8-5ubuntu2, 0
Ubuntu:16.04:LTSchromium-browser47.0.2526.73-0ubuntu1.1218, 53.0.2785.143-0ubuntu0.16.04.1.1257, 53.0.2785.143-0ubuntu0.16.04.1.1254
Ubuntu:14.04:LTSchromium-browser47.0.2526.73-0ubuntu0.14.04.1.1106, 48.0.2564.82-0ubuntu0.14.04.1.1108, 49.0.2623.87-0ubuntu0.14.04.1.1112
Ubuntu:18.04:LTSlibv8-3.143.14.5.8-11ubuntu1, 0
Ubuntu:14.04:LTSoxide-qt1.12.6-0ubuntu0.14.04.1, 1.8.4-0ubuntu0.14.04.2, 1.9.1-0ubuntu0.14.04.2
Ubuntu:16.04:LTSoxide-qt1.11.4-0ubuntu1, 1.11.5-0ubuntu1, 1.12.5-0ubuntu1

Timeline

References

Open in Interactive Console →