VULNERABILITY INTELLIGENCE

CVE-2016-1658

CVSS score4.3 MEDIUM
EPSS probability1.18%
CISA KEVNot currently listed
Published2016-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

Weakness classification

  • nvd@nist.gov: CWE-200

Primary references