UBUNTU-CVE-2016-1623

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2016-1623

Downstream

USN-2895-1

Published: 13 Feb 2016, 00:00

Last modified:04 Feb 2026, 04:28

Vulnerability Summary

Overall Risk (default)

medium

35/100

CVSS Score

8.8 HIGH

3.0 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

13 Feb 2016, 00:00

Published

Vulnerability first disclosed

04 Feb 2026, 04:28

Last Modified

Vulnerability information updated

Description

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.

CVSS Metrics

v3.0•HIGH•Score: 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•chromium-browser
< 48.0.2564.116-0ubuntu0.14.04.1.1111
ubuntu•oxide-qt
< 1.12.6-0ubuntu0.14.04.1