First published: Thu Jan 19 2017(Updated: )
A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit: cve-coordination@google.com chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome (Trace Event) | <=54.0.2840.99 | |
Google Chrome | <=54.0.2840.99 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-5213 has a severity rating of high due to the potential for remote code execution.
To fix CVE-2016-5213, update Google Chrome to version 55.0.2883.75 or later on all affected platforms.
CVE-2016-5213 affects Google Chrome versions prior to 55.0.2883.75 for Mac, Windows, and Linux, and 55.0.2883.84 for Android.
A use after free vulnerability occurs when a program continues to use memory after it has been freed, possibly leading to unpredictable behavior and security breaches.
Yes, CVE-2016-5213 can be exploited through a crafted HTML page to achieve heap corruption by a remote attacker.