CVE-2016-5197

High

Published: 19/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The content view client in Google Chrome prior to version 54.0.2840.85 for Android insufficiently validated intent URLs, allowing a remote attacker who compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized actions on the device, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Google Chrome for Android

CVE-2016-5196High
The content renderer client in Google Chrome prior to version 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, allowing a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.

Original NVD description (English source)

The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.