CVE-2016-1696 PUBLISHED

The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

EPSS 1.45% · 80.7th percentile

Risk Scores

EPSS Score
1.45%
80.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218
Ubuntu:14.04:LTSchromium-browser38.0.2125.111-0ubuntu0.14.04.1.1061, 39.0.2171.65-0ubuntu0.14.04.1.1064, 40.0.2214.94-0ubuntu0.14.04.1.1068

Timeline

References

Open in Interactive Console →