CVE-2016-1629 is a critical vulnerability in Google Chrome (versions prior to 48.0.2564.116) that allows remote attackers to bypass the Blink Same Origin Policy and sandbox protection mechanisms through unspecified vectors, affecting products like Debian, Google, Novell, and OpenSUSE. With a CVSS score of 9.8 (CRITICAL), this vulnerability poses a severe risk, enabling full compromise of confidentiality, integrity, and availability without user interaction or complex attack conditions. While there is no evidence of active exploitation in the wild or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating its potential impact and the attention it received upon disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 48.0.2564.109CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
12CPE matchmatch criteria | cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:* | ||
42.1CPE matchmatch criteria | cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* | ||
13.1CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* | ||
13.2CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.