Back to search
CVE-2016-1625
Published: Feb 14, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
83125
vdb-entry
x_refsource_BID
1035183
vdb-entry
x_refsource_SECTRACK
https://codereview.chromium.org/1669723002
x_refsource_CONFIRM
GLSA-201603-09
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:0491
vendor-advisory
x_refsource_SUSE
https://code.google.com/p/chromium/issues/detail?id=509313
x_refsource_CONFIRM
openSUSE-SU-2016:0518
vendor-advisory
x_refsource_SUSE
DSA-3486
vendor-advisory
x_refsource_DEBIAN
RHSA-2016:0241
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now