CVE-2016-5145 in Chrome
Summary
Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/31/2016
Disclosure
08/07/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 90561 | Google Chrome Blink 7pk security | 254 | Not defined | Official fix | CVE-2016-5145 |