CVE-2016-5196 | BDVDB-2026-80475 Detail

Google Chrome prior to 54.0.2840.85 for Android

Description#

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html
https://crbug.com/659492
http://www.securityfocus.com/bid/94078

Exploit#

No public exploit known

History#

Version 12017-01-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.