ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-1696

—
CVSS 3.0
8.8 high
EPSS
1%p67
Published
()
Modified
Description

The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendors
googledebianopensuseredhatsuse
Products
chrome, debian linux, leap, opensuse, enterprise linux desktop, enterprise linux server, enterprise linux workstation, linux enterprise
Weakness
CWE-254, CWE-284
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.