All vulnerabilities

Servers and applications

CVE-2016-5172

The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.

Severity
Medium 6.5
Published
25 Sept 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 6.0.0 up to 6.8.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-5172
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-5172