Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-5148

Опубликовано: 31 авг. 2016
Источник: redhat
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."

Ссылки на источники

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1372208chromium-browser: universal xss in blink

EPSS

Процентиль: 67%
0.01246
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2016-5148

CVSS3: 6.1
ubuntu
почти 10 лет назад

Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."

nvd логотип

CVE-2016-5148

CVSS3: 6.1
nvd
почти 10 лет назад

Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."

debian логотип

CVE-2016-5148

CVSS3: 6.1
debian
почти 10 лет назад

Cross-site scripting (XSS) vulnerability in Blink, as used in Google C ...

github логотип

GHSA-j8xh-5m6r-qrhr

CVSS3: 6.1
github
больше 4 лет назад

Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."

EPSS

Процентиль: 67%
0.01246
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2