CVE-2016-5196

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which…

published January 19, 2017

CVSS
—
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00979 · 61.6th percentile
Published
2017-01-19T05:43Z
EPSS history
Timeline
  • 19 JAN 05:43Z
    The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which…
    cvelistv5