high7.5
CVE-2016-5168
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.
Impact
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 50.0.2661.91 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/89106
- https://bugs.chromium.org/p/chromium/issues/detail?id=586820
- https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
- https://www.contextis.com//documents/2/Browser_Timing_Attacks.pdf
- http://www.securityfocus.com/bid/89106
- https://bugs.chromium.org/p/chromium/issues/detail?id=586820
- https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
- https://www.contextis.com//documents/2/Browser_Timing_Attacks.pdf