2 matches found
CVE-2016-5149: Improper Control of Generation of Code
The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a...
8.8CVSS7.7AI score0.01347EPSS
SaveExploits0References2
PT-2016-6269
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.89 on Windows and OS X Google Chrome versions prior to 53.0.2785.92 on Linux Opera affected versions not specified Description The issue arises from the extensions subsystem relying on an IFRAME source...
8.8CVSS0.01347EPSS
SaveExploits0
20