UBUNTU-CVE-2016-1668

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2016-1668

Downstream

USN-2960-1

Published: 13 May 2016, 00:00

Last modified:22 Apr 2026, 10:32

Vulnerability Summary

Overall Risk (default)

medium

35/100

CVSS Score

8.8 HIGH

3.0 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

13 May 2016, 00:00

Published

Vulnerability first disclosed

22 Apr 2026, 10:32

Last Modified

Vulnerability information updated

Description

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS Metrics

v3.0•HIGH•Score: 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•chromium-browser
< 50.0.2661.102-0ubuntu0.14.04.1.1117 | < 50.0.2661.102-0ubuntu0.16.04.1.1237
ubuntu•oxide-qt
< 1.14.9-0ubuntu0.14.04.1 | < 1.14.9-0ubuntu0.16.04.1