CVE-2016-1699

CVE-2016-1699 describes an access restriction bypass vulnerability in the Developer Tools (DevTools) subsystem of Blink, as used in Google Chrome versions prior to 51.0.2704.79. This flaw, affecting various distributions including Google, Debian, and Red Hat, arises because the remoteFrontendUrl parameter was not properly validated against a trusted domain. With a CVSS v3 score of 6.5 (Medium), this vulnerability has a network attack vector and low attack complexity, requiring user interaction. A successful exploit could lead to high integrity impacts, allowing remote attackers to bypass intended access restrictions, though confidentiality and availability are not directly impacted. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. While it has received minimal community discussion and media coverage, it is not listed in CISA's Known Exploited Vulnerabilities catalog.