CVE-2016-1648 — Google Chrome vulnerability

5 documents5 sources
Severity
8.8HIGHNVD
EPSS
1.9%
top 16.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Google ChromeDebian LinuxOpensuse
Timeline
PublishedMar 29
Latest updateMay 14

Description

Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDgoogle/chrome49.0.2623.95

Also affects: Debian Linux 8.0

🔴Vulnerability Details

2
GHSA
GHSA-299f-r797-7j97: Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings↗2022-05-14
▶
OSV
CVE-2016-1648: Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings↗2016-03-29
▶

📋Vendor Advisories

1
Red Hat
chromium-browser: use-after-free in Extensions↗2016-03-24
▶

💬Community

1
Bugzilla
CVE-2016-1648 chromium-browser: use-after-free in Extensions↗2016-03-29
▶