CVE-2016-5136
HighSummary
Use-after-free vulnerability in user_script_injector.cc in the Extensions subsystem in Google Chrome before version 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, affecting the availability of applications and services. Additionally, there is a risk of unspecified impacts that could affect data security.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability. Regular browser updates are crucial for maintaining system security.
Other vulnerabilities in Google Chrome Extensions subsystem
See all- CVE-2016-1708High
The inline-installation implementation in the Chrome Web Store in the Extensions subsystem in Google Chrome before version 52.0.2743.82 does not properly consider object lifetimes during progress observation, allowing remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.
- CVE-2016-1632High
The Extensions subsystem in Google Chrome before version 49.0.2623.75 does not properly maintain its own properties, allowing remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast.
- CVE-2015-6788High
The ObjectBackedNativeHandler class in the extensions subsystem of Google Chrome before version 47.0.2526.80 improperly implements handler functions, which may lead to denial of service or other unspecified impacts.
Original NVD description (English source)
Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.