CVE-2016-5214
MEDIUMGoogle Chrome <55.0.2883.75 - Info Disclosure
Title source: llmDescription
Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.
References (5)
Scores
CVSS v3
4.3
EPSS
0.0031
EPSS Percentile
53.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Classification
CWE
CWE-19
Status
published
Affected Products (2)
google/chrome
< 54.0.2840.99
n/a/Google Chrome prior to 55.0.2883.75 for Windows
< Google Chrome prior to 55.0.2883.75 for Windows
Timeline
Published
Jan 19, 2017
Tracked Since
Feb 18, 2026