CVE-2016-1655

—

CVSS 3.0

8.8 high

EPSS

2%p81

Published

Apr 18, 2016 (Apr 18, 2016)

Modified

Jun 17, 2026

Description

Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.

Vendors: debian opensuse suse google canonical
Products: debian linux, leap, linux enterprise, chrome, ubuntu linux
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.