CVE-2016-5150: Use After Free
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5150?
CVE-2016-5150 is rated as a high-severity vulnerability due to potential unauthorized access to indexed databases.
How do I fix CVE-2016-5150?
To fix CVE-2016-5150, update Google Chrome to version 53.0.2785.89 or later.
Which software versions are affected by CVE-2016-5150?
CVE-2016-5150 affects Google Chrome versions prior to 53.0.2785.89 on Windows and OS X, and before 53.0.2785.92 on Linux.
What type of vulnerability is CVE-2016-5150?
CVE-2016-5150 is a web vulnerability related to improper key-path evaluation in the Indexed Database API.
Is there a risk of data exposure with CVE-2016-5150?
Yes, CVE-2016-5150 poses a risk of unauthorized data exposure or manipulation through indexed databases.