UBUNTU-CVE-2016-1661

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2016-1661

Downstream

USN-2960-1

Published: 29 Apr 2016, 00:00

Last modified:04 Feb 2026, 04:13

Vulnerability Summary

Overall Risk (default)

medium

32/100

CVSS Score

8 HIGH

3.0 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

29 Apr 2016, 00:00

Published

Vulnerability first disclosed

04 Feb 2026, 04:13

Last Modified

Vulnerability information updated

Description

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.

CVSS Metrics

v3.0•HIGH•Score: 8CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•chromium-browser
< 50.0.2661.102-0ubuntu0.14.04.1.1117 | < 50.0.2661.102-0ubuntu0.16.04.1.1237