CVE-2016-5283

HIGH · CVSS 8.8 EPSS 1.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-09-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-5283

Severity

HIGH

CVSS

8.8

EPSS

1.49%

Firefox

Original NVD Description

Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.