Sploitus

CVE-2016-5128

No indexed exploits for CVE-2016-5128 yet

objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

Affected products
Alt Linux, Google Chrome, Google V8, Opera, Red Hat, Suse, Ubuntu
Google Chrome
≤ 51.0.2704.106
Google v8
= 5.2.360
Fix
Available
CVSS 3.0
8.8 HIGH
EPSS
1.3% (67th percentile)
Weakness
CWE-254
NVD status
Modified
Published
2016-07-23
CVE-2016-5128 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2016-5128 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2016-5128 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.