Skip to content
Sign in
Not rated

CVE-2016-5226 Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar…

Description

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.

Affected products and versions

Product Affected versions Fixed in
Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac Versions not published

Other CVEs of Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac

The 2 CVEs of Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac →
CVE-2016-5205 Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads,… Not rated
Track this CVE