VULNERABILITY INTELLIGENCE

CVE-2016-5196

CVSS score8.8 HIGH

EPSS probability0.98%

CISA KEVNot currently listed

Published2017-01-19

Last modified2026-06-17

Description

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML ... .