WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 25, 2016 |
| Debian | — | Upgrade chromium-browser | Sep 15, 2016 | Sep 15, 2016 |
| Freebsd | — | Upgrade chromiumUpgrade chromium-npapiUpgrade chromium-pulse | Nov 14, 2016 | Sep 16, 2016 |
| Gentoo Linux | — | Upgrade www-client/chromium. | Oct 30, 2017 | Sep 25, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2016 | Sep 13, 2016 |
| Redhat_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Oct 21, 2016 | Sep 16, 2016 |
| Suse | — | Upgrade chromium-ffmpegsumoUpgrade chromium-desktop-kdeUpgrade chromiumUpgrade chromium-desktop-gnomeUpgrade chromedriver | Sep 15, 2016 | Sep 15, 2016 |
| Ubuntu | — | Upgrade liboxideqtcore0 | Oct 7, 2016 | Sep 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub