Non notée
CVE-2016-5196 The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin…
Description
The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Google Chrome prior to 54.0.2840.85 for Android | Versions non publiées |