CVE-2016-5206

CVE-2016-5206 describes a critical vulnerability in the PDF plugin of Google Chrome versions prior to 55.0.2883.75 (Mac, Windows, Linux) and 55.0.2883.84 (Android). This flaw allowed a remote attacker to bypass the Same Origin Policy by crafting a malicious HTML page that exploited incorrect redirect handling. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.