CVE-2016-5132 in Chromeinformación

Resumen

por MITRE

The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2016-05-31

Divulgación

2016-07-23

Moderación

aceptado

Artículo

VDB-90240

CPE

listo

EPSS

0.01465

KEV

no

Actividades

muy bajo

Sector

Energy, Insurance, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-5132
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-5132
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-5132/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!