VULNERABILITY INTELLIGENCE

CVE-2016-1696

CVSS score8.8 HIGH

EPSS probability1.23%

CISA KEVNot currently listed

Published2016-06-05

Last modified2026-06-17

Description

The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.