CVE-2016-1698: Infoleak
An information leak flaw was found in the Extension bindings component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=603725
External References:
http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
Other sources
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1698?
CVE-2016-1698 is considered a high-severity vulnerability that may allow attackers to load arbitrary modules in Google Chrome.
How do I fix CVE-2016-1698?
To fix CVE-2016-1698, update Google Chrome to version 51.0.2704.79 or later.
Which versions of Google Chrome are affected by CVE-2016-1698?
CVE-2016-1698 affects all versions of Google Chrome prior to 51.0.2704.79.
What impact does CVE-2016-1698 have on users?
CVE-2016-1698 can potentially allow attackers to access sensitive information or execute arbitrary code.
Is CVE-2016-1698 relevant for users of Linux distributions?
Yes, CVE-2016-1698 affects Google Chrome on various Linux distributions including Red Hat and SUSE, up to specific versions.