CVE-2016-5226

CVE-2016-5226 describes a cross-site scripting (XSS) vulnerability in Google Chrome versions prior to 55.0.2883.75 across Linux, Windows, and Mac. This flaw allowed a user to self-XSS by dragging and dropping a javascript: URL into the URL bar, executing malicious JavaScript in the context of the current tab. With a CVSS score of 6.1 (Medium), it requires user interaction and social engineering, leading to potential low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, indicating a low exploitation status.