QwikSec

Security Database

CVE

CWE

Training

CVE-2016-1658

Published: Apr 18, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

openSUSE-SU-2016:1136

vendor-advisory

x_refsource_SUSE

https://codereview.chromium.org/1658913002

x_refsource_CONFIRM

openSUSE-SU-2016:1135

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

SUSE-SU-2016:1060

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_DEBIAN

openSUSE-SU-2016:1061

vendor-advisory

x_refsource_SUSE

http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

https://crbug.com/573317

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.