CVE-2016-5177
HighSummary
Use-after-free vulnerability in V8 in Google Chrome before version 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
Risk Assessment
Organizations may be exposed to system crashes and other unforeseen issues, potentially leading to service downtime.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Google Chrome V8
See all- CVE-2026-0900High
A vulnerability in the V8 JavaScript engine in Google Chrome prior to 144.0.7559.59 is caused by inappropriate implementation, potentially leading to object corruption. A remote attacker can exploit this by delivering a crafted HTML page.
- CVE-2026-0899High
CVE-2026-0899 is a vulnerability in the V8 engine of Google Chrome prior to version 144.0.7559.59. It involves out-of-bounds memory access, which can lead to object corruption. A remote attacker can exploit this flaw via a crafted HTML page.
- CVE-2017-5122High
Inappropriate handling of table size in V8 in Google Chrome prior to version 61.0.3163.100 for Windows allows a remote attacker to trigger out-of-bounds access via a crafted HTML page.
- CVE-2017-5121High
Inappropriate use of JIT optimisation in V8 in Google Chrome prior to version 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.
- CVE-2017-5116High
Type confusion in V8 in Google Chrome prior to version 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- CVE-2017-5115High
Type confusion in V8 in Google Chrome prior to version 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
- CVE-2017-5098High
A use after free in V8 in Google Chrome prior to version 60.0.3112.78 for Mac, Windows, Linux, and Android allows a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- CVE-2017-5088High
Insufficient validation of untrusted input in V8 in Google Chrome prior to version 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
- CVE-2017-5054High
An out-of-bounds read in V8 in Google Chrome prior to version 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.
- CVE-2017-5012High
A heap buffer overflow in V8 in Google Chrome prior to version 56.0.2924.76 for Linux, Windows, and Mac, and prior to version 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Original NVD description (English source)
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS