Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Chrome OS can be hijacked to run commands at startup

CVE-2016-5179 · published 8 years ago
Summary

Versions of Chrome OS older than 53.0.2785.144 let a remote attacker cause the machine to run any command when it starts up, which could give the attacker control of the device. Update Chrome OS to the latest release or apply Google’s security patch as soon as possible to close this gap.

What to do
  • Update google chrome_os to version 53.0.2785.144 or later.
Affected software
VendorProductAffected versions
google chrome_os < 53.0.2785.144
cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
Original advisory text
Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.
Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published7 Mar 2018
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2016-5179 · NVD
Track software like this
Free during beta