vulnerability

Google Chrome Vulnerability: CVE-2016-1664 Address bar spoofing

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:N/C:N/I:P/A:N)	May 14, 2016	May 19, 2016	Nov 8, 2023

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

May 14, 2016

Added

May 19, 2016

Modified

Nov 8, 2023

Description

The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.

Solution

google-chrome-upgrade-latest

References

CVE-2016-1664
https://attackerkb.com/topics/CVE-2016-1664

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today