CVE-2016-5133

CVE-2016-5133 describes a vulnerability in Google Chrome versions prior to 52.0.2743.82 where the browser mishandles origin information during proxy authentication. This flaw allows man-in-the-middle attackers to spoof proxy-authentication prompts or cause incorrect credential storage by manipulating the data stream between the client and server. Rated as Medium severity (CVSS 5.3), the attack requires high complexity and user interaction, but could lead to high integrity impact. There is no evidence of active exploitation, no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the KEV catalog, though it garnered some community discussion and media coverage at the time of its disclosure.