Lucene search

K
cvelistChromeCVELIST:CVE-2016-1664
HistoryMay 14, 2016 - 9:00 p.m.

CVE-2016-1664

2016-05-1421:00:00
Chrome
www.cve.org
5

AI Score

5.8

Confidence

Low

EPSS

0.004

Percentile

73.3%

The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.