QwikSec

Security Database

CVE

CWE

Training

CVE-2016-5197

Published: Jan 19, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.

Vendor	Product	Versions
n/a	Google Chrome prior to 54.0.2840.85 for Android	affected `Google Chrome prior to 54.0.2840.85 for Android`

References

https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

https://crbug.com/659477

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.