CVE-2016-5225 PUBLISHED

Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.

EPSS 0.23% · 45.7th percentile

Risk Scores

EPSS Score
0.23%
45.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSchromium-browser39.0.2171.65-0ubuntu0.14.04.1.1064, 40.0.2214.94-0ubuntu0.14.04.1.1068, 40.0.2214.111-0ubuntu0.14.04.1.1069
Ubuntu:14.04:LTSoxide-qt1.13.6-0ubuntu0.14.04.1, 1.14.7-0ubuntu0.14.04.1, 1.14.9-0ubuntu0.14.04.1
Ubuntu:16.04:LTSoxide-qt1.18.5-0ubuntu0.16.04.1, 1.11.5-0ubuntu1, 1.12.5-0ubuntu1
Ubuntu:16.04:LTSchromium-browser45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218, 47.0.2526.106-0ubuntu1.1221

Timeline

References

Open in Interactive Console →