CVE-2016-5168: High severity google chrome (trace event) vulnerability
Published Apr 28, 2016
·Updated
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.
Affected Software
1 affected component
Google Chrome<=50.0.2661.91
Event History
Apr 28, 2016
CVE Published
12:00 AM
Apr 21, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2016-5168?
CVE-2016-5168 has been assigned a medium severity rating due to its potential to bypass the Same Origin Policy.
2
How can CVE-2016-5168 be mitigated?
To mitigate CVE-2016-5168, users should update Google Chrome to version 50.0.2661.94 or later.
3
What does CVE-2016-5168 affect?
CVE-2016-5168 affects Google Chrome versions prior to 50.0.2661.94, allowing information leaks.
4
Who is impacted by CVE-2016-5168?
Users of Google Chrome versions older than 50.0.2661.94 are impacted by CVE-2016-5168.
5
Is there a patch for CVE-2016-5168?
Yes, a patch for CVE-2016-5168 is included in the Google Chrome update to version 50.0.2661.94.