CVE-2016-1675 describes a Same Origin Policy (SOP) bypass vulnerability in Blink, the rendering engine used by Google Chrome prior to version 51.0.2704.63. This flaw, related to Document reattachment during destruction, affected various distributions including Google Chrome, Debian, and Red Hat. With a CVSSv3 score of 8.8 (High), this vulnerability could be exploited remotely with low attack complexity, requiring user interaction. A successful attack could lead to high impact on confidentiality, integrity, and availability, allowing attackers to bypass the SOP and potentially access sensitive data. Currently, there is no evidence of active exploitation (not in KEV) and no public exploit code available in Metasploit, Nuclei, or ExploitDB. Despite this, the vulnerability has garnered some community attention with 2 mentions and 2 media articles, indicating a degree of awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
14.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | ||
15.10CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* | ||
16.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
42.1CPE matchmatch criteria | cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.