CVE-2016-5222: Input Validation
Published Jan 19, 2017
·Updated
Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Affected Software
1 affected component
Google Chrome<=54.0.2840.99
Event History
Jan 19, 2017
CVE Published
via MITRE·05:43 AM
Data Sourced
via MITRE·05:43 AM
DescriptionWeakness
Data Sourced
via NVD·05:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5222?
CVE-2016-5222 has been classified as a high severity vulnerability due to its potential for spoofing attacks.
2
How do I fix CVE-2016-5222?
To fix CVE-2016-5222, update Google Chrome to version 55.0.2883.75 or later.
3
What platforms are affected by CVE-2016-5222?
CVE-2016-5222 affects Google Chrome on Mac, Windows, Linux, and Android platforms.
4
What type of attack does CVE-2016-5222 allow?
CVE-2016-5222 allows a remote attacker to spoof the contents of the Omnibox through a crafted HTML page.
5
Which versions of Google Chrome are vulnerable to CVE-2016-5222?
Google Chrome versions prior to 55.0.2883.75 are vulnerable to CVE-2016-5222.