← Vulnerability Intelligence

CVE-2016-5198

High 8.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Google Chromium V8 Out-of-Bounds Memory Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

Metrics

CVSS 3.1
8.8 (HIGH) Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS — exploit probability
34% (percentile: 98) as of 1 November 2026
CWE
CWE-787

Affected products

google: chrome; linux: linux kernel; google: android; apple: macos; microsoft: windows; redhat: enterprise linux desktop; redhat: enterprise linux server; redhat: enterprise linux workstation

References