CVE-2016-5178

CWE-20 — Improper Input Validation8 documents7 sources
Severity
9.8CRITICAL
EPSS
2.1%
top 15.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Google ChromeDebian Debian LinuxFedoraproject Fedora+4 more
Timeline
PublishedMay 23
Latest updateMay 14

Description

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages6 packages

▶NVDgoogle/chrome53.0.2785.129
▶Ubuntuoxide-qt< 1.17.9-0ubuntu0.14.04.1+1
▶Ubuntuchromium-browser< 53.0.2785.143-0ubuntu0.14.04.1.1142+1
▶NVDopensuse/leap42.1

Also affects: Debian Linux 8.0, Fedora 24, 25, Enterprise Linux 6.0

🔴Vulnerability Details

3
GHSA
GHSA-mc67-q4m7-29hh: Multiple unspecified vulnerabilities in Google Chrome before 53↗2022-05-14
▶
CVEList
CVE-2016-5178: Multiple unspecified vulnerabilities in Google Chrome before 53↗2017-05-23
▶
OSV
CVE-2016-5178: Multiple unspecified vulnerabilities in Google Chrome before 53↗2016-10-02
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2016-10-07
▶
Red Hat
chromium-browser: various fixes from internal audits↗2016-09-29
▶

💬Community

2
Bugzilla
CVE-2016-5177 CVE-2016-5178 chromium: various flaws [fedora-all]↗2016-09-30
▶
Bugzilla
CVE-2016-5178 chromium-browser: various fixes from internal audits↗2016-09-30
▶
CVE-2016-5178 (CRITICAL CVSS 9.8) | Multiple unspecified vulnerabilitie | cvebase.io