CVE-2016-5168

Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

Score

CVSS 3.0 7.5 High

Status

Modified - chrome-cve-admin@google.com

Published

2017-04-21

Last modified

2024-08-06

Weaknesses

CWE-346

Affected products

• Chrome (Google)

References

• http://www.securityfocus.com/bid/89106
• https://bugs.chromium.org/p/chromium/issues/detail?id=586820
• https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
• https://www.contextis.com//documents/2/Browser_Timing_Attacks.pdf