Lucene search

K
cvelistChromeCVELIST:CVE-2016-1698
HistoryJun 05, 2016 - 11:00 p.m.

CVE-2016-1698

2016-06-0523:00:00
Chrome
www.cve.org

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.