CVE catalog

CVE-2016-5173

UBUNTU-CVE-2016-5173

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.02% · Oct 25, 2026

The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuchromium-browser14.0429.0.1547.65-0ubuntu2vulnerable
Ubuntuchromium-browser14.0431.0.1650.63-0ubuntu1~20131204.1vulnerable
Ubuntuchromium-browser14.0432.0.1700.107-0ubuntu1~20140204.977.1vulnerable
Ubuntuchromium-browser14.0433.0.1750.152-0ubuntu1~pkg995.1vulnerable
Ubuntuchromium-browser14.0434.0.1847.116-0ubuntu2vulnerable
Ubuntuchromium-browser14.0436.0.1985.125-0ubuntu1.14.04.0~pkg1029vulnerable
Ubuntuchromium-browser14.0437.0.2062.94-0ubuntu0.14.04.1~pkg1042vulnerable
Ubuntuchromium-browser14.0437.0.2062.120-0ubuntu0.14.04.1~pkg1049vulnerable
Ubuntuchromium-browser14.0438.0.2125.111-0ubuntu0.14.04.1.1061vulnerable
Ubuntuchromium-browser14.0439.0.2171.65-0ubuntu0.14.04.1.1064vulnerable
Ubuntuchromium-browser14.0440.0.2214.94-0ubuntu0.14.04.1.1068vulnerable
Ubuntuchromium-browser14.0440.0.2214.111-0ubuntu0.14.04.1.1069vulnerable
Ubuntuchromium-browser14.0441.0.2272.76-0ubuntu0.14.04.1.1076vulnerable
Ubuntuchromium-browser14.0443.0.2357.81-0ubuntu0.14.04.1.1089vulnerable
Ubuntuchromium-browser14.0443.0.2357.130-0ubuntu0.14.04.1.1092vulnerable
Ubuntuchromium-browser14.0444.0.2403.89-0ubuntu0.14.04.1.1095vulnerable
Ubuntuchromium-browser14.0445.0.2454.85-0ubuntu0.14.04.1.1097vulnerable
Ubuntuchromium-browser14.0445.0.2454.101-0ubuntu0.14.04.1.1099vulnerable
Ubuntuchromium-browser14.0447.0.2526.73-0ubuntu0.14.04.1.1106vulnerable
Ubuntuchromium-browser14.0447.0.2526.106-0ubuntu0.14.04.1.1107vulnerable
Ubuntuchromium-browser14.0448.0.2564.82-0ubuntu0.14.04.1.1108vulnerable
Ubuntuchromium-browser14.0448.0.2564.116-0ubuntu0.14.04.1.1111vulnerable
Ubuntuchromium-browser14.0449.0.2623.87-0ubuntu0.14.04.1.1112vulnerable
Ubuntuchromium-browser14.0449.0.2623.108-0ubuntu0.14.04.1.1113vulnerable
Ubuntuchromium-browser14.0450.0.2661.102-0ubuntu0.14.04.1.1117vulnerable
Ubuntuchromium-browser14.0451.0.2704.79-0ubuntu0.14.04.1.1121vulnerable
Ubuntuchromium-browser14.0452.0.2743.116-0ubuntu0.14.04.1.1134vulnerable
Ubuntuchromium-browser14.0453.0.2785.143-0ubuntu0.14.04.1.1142fixed
Ubuntuchromium-browser16.0445.0.2454.101-0ubuntu1.1201vulnerable
Ubuntuchromium-browser16.0447.0.2526.73-0ubuntu1.1218vulnerable
Ubuntuchromium-browser16.0447.0.2526.106-0ubuntu1.1221vulnerable
Ubuntuchromium-browser16.0448.0.2564.82-0ubuntu1.1222vulnerable
Ubuntuchromium-browser16.0448.0.2564.116-0ubuntu1.1229vulnerable
Ubuntuchromium-browser16.0449.0.2623.87-0ubuntu1.1232vulnerable
Ubuntuchromium-browser16.0449.0.2623.108-0ubuntu1.1233vulnerable
Ubuntuchromium-browser16.0450.0.2661.102-0ubuntu0.16.04.1.1237vulnerable
Ubuntuchromium-browser16.0451.0.2704.79-0ubuntu0.16.04.1.1242vulnerable
Ubuntuchromium-browser16.0452.0.2743.116-0ubuntu0.16.04.1.1250vulnerable
Ubuntuchromium-browser16.0453.0.2785.143-0ubuntu0.16.04.1.1254fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuchromium-browserdeb14.0453.0.2785.143-0ubuntu0.14.04.1.1142Not reportedUBUNTU-CVE-2016-5173Not reported
Ubuntuchromium-browserdeb16.0453.0.2785.143-0ubuntu0.16.04.1.1254Not reportedUBUNTU-CVE-2016-5173Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]