CVE-2016-5145 in Chrome

Sumário (Inglês)

Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

31/05/2016

Divulgação

07/08/2016

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
90561	Google Chrome Blink Elevação de Privilégios	254	Não definido	Correção oficial	CVE-2016-5145

Fontes

• MITRE
• NVD
• CVE Details