CVE-2016-1696

Description

The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

References

https://crbug.com/601073

https://codereview.chromium.org/1866103002

https://access.redhat.com/errata/RHSA-2016:1201

http://www.securitytracker.com/id/1036026

http://www.debian.org/security/2016/dsa-3594

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html

http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS