CVE-2016-1658

4.3MEDIUM

Key Information

Vendor: Novell
Status: Suse Package Hub For Suse Linux Enterprise; Leap
Vendor: CVE Published:; 18 April 2016

Summary

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Apr 18, 2016
Vulnerability Reserved.
Jan 12, 2016

Collectors

NVD DatabaseMitre Database