CVE-2016-5208: XSS
Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5208?
The severity of CVE-2016-5208 is considered high due to its potential for remote exploitation through arbitrary script injection.
How do I fix CVE-2016-5208?
To fix CVE-2016-5208, update Google Chrome to version 55.0.2883.75 or later.
What type of vulnerability is CVE-2016-5208?
CVE-2016-5208 is a user-exploitable cross-site scripting vulnerability which allows for DOM tree corruption.
Which versions of Google Chrome are affected by CVE-2016-5208?
CVE-2016-5208 affects Google Chrome versions prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android.
Can CVE-2016-5208 be exploited through a crafted HTML page?
Yes, CVE-2016-5208 can be exploited by a remote attacker via a crafted HTML page that injects arbitrary scripts or HTML.