CVE-2017-5016: Medium severity Google Chrome vulnerability
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5016?
CVE-2017-5016 has been rated as high severity due to the potential for remote attackers to manipulate UI elements.
How do I fix CVE-2017-5016?
To fix CVE-2017-5016, update Google Chrome to version 56.0.2924.76 or later.
What systems are affected by CVE-2017-5016?
CVE-2017-5016 affects Google Chrome versions prior to 56.0.2924.76 on Linux, Windows, Mac, and 56.0.2924.87 on Android.
What does CVE-2017-5016 exploit?
CVE-2017-5016 exploits a flaw in Blink that allows non-visible pages to display UI elements crafted by remote attackers.
Can CVE-2017-5016 lead to phishing attacks?
Yes, CVE-2017-5016 can be exploited to deceive users through manipulated UI elements, making it a potential vector for phishing attacks.