CVE-2016-5198

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 34,2%

Kerentanan Out-of-bounds Write pada google chrome, redhat enterprise linux desktop +2 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

Rincian

Terbit di NVD

19 Januari 2017

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

34,2% peluang dieksploitasi; lebih tinggi dari 98,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Google Chromium V8 Out-of-Bounds Memory Vulnerability

Masuk KEV

8 Juni 2022

Tenggat CISA

22 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop.html release notes · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-5198 pemerintah AS
• http://rhn.redhat.com/errata/RHSA-2016-2672.html advisory pihak ketiga
• http://www.securityfocus.com/bid/94079 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1037224 broken link · advisory pihak ketiga · vdb entry
• https://crbug.com/659475 exploit · issue tracking