CVE-2016-5192

6.5MEDIUM

Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.

Published: 12/18/2016Updated: 4/12/2025
View on NVDView on MITRE

Description

Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.

AI AnalysisPowered by AI

Affected Products

googlechrome

References