description: Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
problem types: object corruption
affected:
{
product: Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android
vendor: n/a
versions:
status: affected, version: Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android
}