CVE-2016-5132

CVE-2016-5132 describes a Same Origin Policy bypass vulnerability in Google Chrome versions prior to 52.0.2743.82. The Service Workers subsystem incorrectly handled Secure Contexts, allowing remote attackers to bypass security restrictions by embedding an HTTPS IFRAME within an HTTP IFRAME. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity that could lead to high confidentiality, integrity, and availability impacts if a user interacts with a malicious page. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability received moderate community attention and media coverage at the time of its disclosure.