Rapid7

vulnerability

SUSE: CVE-2016-1661: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:C)
Published
May 4, 2016
Added
May 4, 2016
Modified
Jun 20, 2021

Description

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.

Solution

suse-upgrade-chromium
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.