What’s Vulnerable › Vulnerabilities

CVE-2016-5168

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-21 · updated 2026-06-17
• Weakness: CWE-346

Description

Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

Affected products

• Google Chrome: through 50.0.2661.91

References

• http://www.securityfocus.com/bid/89106
• https://bugs.chromium.org/p/chromium/issues/detail?id=586820
• https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
• https://www.contextis.com//documents/2/Browser_Timing_Attacks.pdf
• http://www.securityfocus.com/bid/89106
• https://bugs.chromium.org/p/chromium/issues/detail?id=586820
• https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
• https://www.contextis.com//documents/2/Browser_Timing_Attacks.pdf

Get alerted when CVE-2016-5168 or the next vulnerability affects your stack