CVE-2016-5145 in Google Chrome
要約 (英語)
Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
予約する
2016年05月31日
公開
2016年08月07日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 90561 | Google Chrome Blink 特権昇格 | 254 | 未定義 | 公式な修正 | CVE-2016-5145 |