PT-2016-6308
CVE-2016-5190
·
Published
2016-10-17
·
Updated
2024-06-15
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 54.0.2840.59 for Windows, Mac, and Linux
Google Chrome version 54.0.2840.85 for Android
Description
The issue incorrectly handled object lifecycles during shutdown, allowing a remote attacker to perform an out of bounds memory read via crafted HTML pages.
Recommendations
For Google Chrome versions prior to 54.0.2840.59 for Windows, Mac, and Linux, update to version 54.0.2840.59 or later.
For Google Chrome version 54.0.2840.85 for Android, update to a version later than 54.0.2840.85.
Found an issue in the description? Have something to add? Feel free to write us 👾