Skip to content
Sign in
Not rated

CVE-2016-5196 The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin…

Description

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

Affected products and versions

Product Affected versions Fixed in
Google Chrome prior to 54.0.2840.85 for Android Versions not published

Other CVEs of Google Chrome prior to 54.0.2840.85 for Android

The 2 CVEs of Google Chrome prior to 54.0.2840.85 for Android →
CVE-2016-5197 The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which… Not rated
Track this CVE