High severity8.8NVD Advisory· Published Aug 7, 2016· Updated Jun 17, 2026
CVE-2016-5145
CVE-2016-5145
Description
Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords2 versionspkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweedpkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012
< 55.0.2883.75-3.1+ 1 more
- (no CPE)range: < 55.0.2883.75-3.1
- (no CPE)range: < 52.0.2743.116-92.1
Patches
Vulnerability mechanics
References
12- googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-1580.htmlnvd
- www.securityfocus.com/bid/92276nvd
- www.securitytracker.com/id/1036547nvd
- codereview.chromium.org/2096313002nvd
- codereview.chromium.org/2097393002nvd
- codereview.chromium.org/2178513002nvd
- crbug.com/623406nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KMX62M7UNRLWO4FEQ6YIMPMTKXXJV6A/nvd
- security.gentoo.org/glsa/201610-09nvd
News mentions
0No linked articles in our index yet.