CVE-2016-1675

HIGH

Google Chrome <51.0.2704.63 - CSRF

Title source: llm

Description

Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.

Exploits (1)

github NO CODE 31 stars
by OpenSISE · cpoc
https://github.com/OpenSISE/CVE_PoC_Collect/tree/master/Browser/CVE-2016-1675

References (12)

Scores

CVSS v3 8.8
EPSS 0.0120
EPSS Percentile 78.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-284
Status published
Products (11)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.10
canonical/ubuntu_linux 16.04
debian/debian_linux 8.0
google/chrome < 50.0.2661.102
opensuse/leap 42.1
opensuse/opensuse 13.2
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_server 6.0
redhat/enterprise_linux_workstation 6.0
... and 1 more
Published Jun 05, 2016
Tracked Since Feb 18, 2026