← Back to browse · API

CVE-2016-5198

Severity
HIGH
CVSS
8.8
EPSS
0.34814
Risk score
72.38
CISA KEV
Yes
PoC
No
Published
2017-01-19
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2016-6149, GHSA-CPFM-2P8W-WRXC
Products
Google:Chromium V8, n/a:Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac
Sources
euvd EUVD-2016-6149
cisa.gov CVE-2016-5198

Description

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

References