Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-5141

25
FAUCET Score

CVE-2016-5141 describes a spoofing vulnerability in Blink, specifically affecting Google Chrome versions prior to 52.0.2743.116. This flaw allows remote attackers to manipulate the address bar display by exploiting how provisional URLs are handled for initially empty documents. Rated as High severity with a CVSS score of 7.5, this vulnerability has a low attack complexity and could lead to significant integrity impacts, though it does not affect confidentiality or availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Despite this, it garnered some community discussion and media coverage at the time of its disclosure.

Impacted Technologies

VendorProductVersion(s)CPE
<= 52.0.2743.82CPE matchmatch criteria
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.48%
Probability of exploitation in next 30 days
EPSS Percentile
71.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0148 is in the 53rd percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 SupplementaryFixed in: chromium-browser-0:52.0.2743.116-1.el6
View patch

Vendor Advisories (1)

redhatCVE-2016-5141Important

chromium-browser: Address bar spoofing

Aug 3, 2016

References

googlechromereleases.blogspot.com / 2016/08/stable-channel-update-for-desktop.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00005.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00006.html
rhn.redhat.com / errata/RHSA-2016-1580.html
codereview.chromium.org / 2171063002
crbug.com / 629542
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/4KMX62M7UNRLWO4FEQ6YIMPMTKXXJV6A
security.gentoo.org / glsa/201610-09
debian.org / security/2016/dsa-3645
securityfocus.com / bid/92276
securitytracker.com / id/1036547