CVE-2016-5164: XSS
Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka "Universal XSS (UXSS)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5164?
CVE-2016-5164 is classified as a medium severity vulnerability due to its potential to allow remote code execution via XSS attacks.
How do I fix CVE-2016-5164?
To fix CVE-2016-5164, users should update Google Chrome to version 53.0.2785.89 or later on Windows and OS X, or version 53.0.2785.92 or later on Linux.
What software is affected by CVE-2016-5164?
CVE-2016-5164 affects Google Chrome versions prior to 53.0.2785.89 and openSUSE Leap 42.1.
Is CVE-2016-5164 a critical vulnerability?
CVE-2016-5164 is not considered critical but poses significant risk due to its ability to exploit built-in developer tools.
Can CVE-2016-5164 be exploited in other browsers?
CVE-2016-5164 specifically targets Google Chrome and is associated with its implementation of the Blink engine and Developer Tools.