CVE-2016-5171

High

Published: 25/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Blink, used in Google Chrome before version 53.0.2785.113, there is a vulnerability that does not prevent certain constructor calls. This can lead to denial of service (use-after-free) or other unspecified impacts via crafted JavaScript code.

Risk Assessment

Remote attackers may exploit this vulnerability to disrupt application functionality or introduce unforeseen effects, which could impact user security.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor applications for unusual activities.

Other vulnerabilities in Blink in Google Chrome

CVE-2015-1303High
In Blink, used in Google Chrome before version 45.0.2454.101, there is a vulnerability that does not perform a rethrow action to propagate information about cross-context exceptions. This allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.

Original NVD description (English source)

WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.