CVE-2016-9651
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 11%
from disclosure to weapon0 days
Published on NVDJan 9
1st PoCJun 14
exploitation probability
11%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Affected products
Google · Chromepublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/42175unverifiedcve_referencewww.exploit-db.com/exploits/42175/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.