CVE-2016-1674: High severity debian linux vulnerability
A cross-origin bypass flaw was found in the extensions component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=598165
External References:
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html
Other sources
The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1674?
CVE-2016-1674 is considered a high severity vulnerability due to its potential to bypass the Same Origin Policy, which can allow remote attacks.
How do I fix CVE-2016-1674?
To fix CVE-2016-1674, you should upgrade Google Chrome to version 51.0.2704.63 or later.
Which versions of Google Chrome are affected by CVE-2016-1674?
CVE-2016-1674 affects versions of Google Chrome prior to 51.0.2704.63.
Does CVE-2016-1674 affect any specific operating systems?
CVE-2016-1674 affects multiple operating systems including Red Hat, Debian, and openSUSE that run vulnerable versions of Google Chrome.
What type of vulnerability is CVE-2016-1674?
CVE-2016-1674 is a cross-origin bypass vulnerability found in the extensions subsystem of the Google Chrome browser.