Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-9651

Опубликовано: 09 янв. 2019
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Средний

Описание

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 55.0.2883.75 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.52739
Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS3: 8.8
redhat
около 9 лет назад

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS3: 8.8
debian
около 7 лет назад

A missing check for whether a property of a JS object is private in V8 ...

CVSS3: 8.8
github
больше 3 лет назад

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

suse-cvrf
около 9 лет назад

Security update for Chromium

EPSS

Процентиль: 98%
0.52739
Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-94