CVE-2016-5198
| CVE Published | 2017-01-19 |
|---|---|
| Related CWE(s) | CWE-125: Out-of-bounds Read, CWE-787: Out-of-bounds Write |
| Related Vendor(s) | redhat, google |
| Related Product(s) | enterprise_linux_server, enterprise_linux_workstation, chrome, enterprise_linux_desktop |
| Exploitation Reported (CISA KEV) | 2022-06-08 |
| CVSS 3 Base Score | 8.8 (HIGH) |
| CVSS 3 Attack Complexity | LOW |
| CVSS 3 Attack Vector | NETWORK |
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
Cyber Threat Graph Context
Explore how this CVE relates to the wider threat graph