QwikSec

Security Database

CVE

CWE

Training

CVE-2016-5196

Published: Jan 19, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

Vendor	Product	Versions
n/a	Google Chrome prior to 54.0.2840.85 for Android	affected `Google Chrome prior to 54.0.2840.85 for Android`

References

https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html

x_refsource_CONFIRM

https://crbug.com/659492

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.