CVE-2016-1662

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 14 May 2016, 21:00
Last modified:05 Aug 2024, 23:02

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
10 HIGH
v2.0 (nvd)
EPSS Score
15.77% MEDIUM
16% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 May 2016, 21:00
Published
Vulnerability first disclosed
05 Aug 2024, 23:02
Last Modified
Vulnerability information updated

Description

extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

CVSS Metrics

  • v3.0•CRITICAL•Score: 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 15.77%• Percentile: 95%

Affected Systems

  • Unknown•Chrome

    ≤ 50.0.2661.87

  • opensuse•opensuse

    13.1

  • redhat•enterprise_linux_desktop_supplementary

    6.0

  • redhat•enterprise_linux_server_supplementary

    6.0

  • redhat•enterprise_linux_server_supplementary_eus

    6.7.z

  • redhat•enterprise_linux_workstation_supplementary

    6.0

References (11)