NVD

Id
20487  
Name
CVE-2016-5148  
Description
Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-09-11  
Modified Date
2016-11-28  
Seq
2016-5148  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112136 20487 CVE-2016-5148 openSUSE-SU-2016:2250  View
112137 20487 CVE-2016-5148 SUSE-SU-2016:2251  View
112138 20487 CVE-2016-5148 openSUSE-SU-2016:2296  View
112139 20487 CVE-2016-5148 openSUSE-SU-2016:2349  View
112140 20487 CVE-2016-5148 RHSA-2016:1854  View
112141 20487 CVE-2016-5148 DSA-3660  View
112142 20487 CVE-2016-5148 92717  View
112143 20487 CVE-2016-5148 https://codereview.chromium.org/2134113002  View
112144 20487 CVE-2016-5148 https://crbug.com/621362  View
112145 20487 CVE-2016-5148 https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3825 JVNDB-2016-004598 Google Chrome で使用される Blink におけるクロスサイトスクリプティングの脆弱性 Google Chrome で使用される Blink には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-5148 91654 CVE-2016-5148 20487 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004598.html 2016-08-31 2016-09-13 View