CVE-2016-5141

—

CVSS 3.0

7.5 high

EPSS

1%p72

Published

Aug 7, 2016 (Aug 7, 2016)

Modified

Jun 17, 2026

Description

Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp.

Vendors: google
Products: chrome
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.