CVEvulnerability
CVE-2016-1632
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-03-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.
Affected configurations
• google chrome (<= 48.0.2564.116)
Related
Weakness · not in database (1)
References
- http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html lists.opensuse.org
- http://www.debian.org/security/2016/dsa-3507 www.debian.org
- http://www.securityfocus.com/bid/84008 www.securityfocus.com
- http://www.securitytracker.com/id/1035185 www.securitytracker.com
- https://code.google.com/p/chromium/issues/detail?id=549986 code.google.com
- https://codereview.chromium.org/1433293004 codereview.chromium.org
- https://security.gentoo.org/glsa/201603-09 security.gentoo.org
- http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html lists.opensuse.org
- http://www.debian.org/security/2016/dsa-3507 www.debian.org
- http://www.securityfocus.com/bid/84008 www.securityfocus.com
- http://www.securitytracker.com/id/1035185 www.securitytracker.com
- https://code.google.com/p/chromium/issues/detail?id=549986 code.google.com
- https://codereview.chromium.org/1433293004 codereview.chromium.org
- https://security.gentoo.org/glsa/201603-09 security.gentoo.org