CVE-2016-1629 Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 48.0.2564.109 | No fix listed |
| novell suse package hub for suse linux enterprise | = 12 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2016:0520 vendor-advisory
- openSUSE-SU-2016:0525 vendor-advisory
- openSUSE-SU-2016:0529 vendor-advisory
- RHSA-2016:0286 vendor-advisory
- DSA-3486 vendor-advisory
- 83302 vdb-entry
- 1035184 vdb-entry
- USN-2905-1 vendor-advisory
- code.google.com
- GLSA-201603-09 vendor-advisory