CVE-2016-1679

CVE-2016-1679 is a use-after-free vulnerability in the V8 bindings of Google Chrome versions prior to 51.0.2704.63, affecting various distributions including Debian, Red Hat, and SUSE. This flaw, stemming from improper restriction of getters and setters in the ToV8Value function, allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts via crafted JavaScript. With a CVSS v3.0 score of 8.8 (High), it is easily exploitable over a network with low attack complexity, requiring user interaction, and carries high impacts to confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB; however, it has garnered some community discussion and media coverage.