Medium severity · published Sep 6, 2016
CVE-2016-7152
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain…
5.3
CVSS
12.8%
EPSS
No
On KEV
Description
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)12.8% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
All versions, or not specified · source: NVD
FI
Firefox · Mozilla
All versions, or not specified · source: NVD
ED
Edge · Microsoft
All versions, or not specified · source: NVD
IE
Internet Explorer · Microsoft
All versions, or not specified · source: NVD
OP
Opera · Opera
All versions, or not specified · source: NVD
SA
Safari · Apple
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-7152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-7152
Technical Description
http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/
www.securityfocus.com
http://www.securityfocus.com/bid/92769
www.securitytracker.com
http://www.securitytracker.com/id/1036741
www.securitytracker.com
http://www.securitytracker.com/id/1036742
www.securitytracker.com
http://www.securitytracker.com/id/1036743
www.securitytracker.com
http://www.securitytracker.com/id/1036744
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability