CVE-2016-5128

HIGH · CVSS 8.8 EPSS 1.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-07-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-5128

Severity

HIGH

CVSS

8.8

EPSS

1.29%

Chrome

Original Filing — NVD Description

objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.