CVE-2016-1652: XSS
Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/modulesystem.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1652?
CVE-2016-1652 has a moderate severity rating due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2016-1652?
To fix CVE-2016-1652, update Google Chrome to version 50.0.2661.75 or later.
What versions of Google Chrome are affected by CVE-2016-1652?
Google Chrome versions prior to 50.0.2661.75 are affected by CVE-2016-1652.
Which operating systems are impacted by CVE-2016-1652?
CVE-2016-1652 affects multiple operating systems, including Debian 8.0, openSUSE 42.1, and SUSE Linux Enterprise Server 12.0.
What type of vulnerability is CVE-2016-1652?
CVE-2016-1652 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary scripts into web pages.