CVE-2016-1634

🗓️ 06 Mar 2016 02:59:05Reported by [email protected]Type

Use-after-free vulnerability in StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or unspecified other impact via a crafted web site triggering CSS style invalidation

Reporter	Title	Published	Views	Family All 50
ArchLinux	chromium: multiple issues	3 Mar 201600:00	–	archlinux
CNVD	Google Chrome Blink Memory Misreference Vulnerability (CNVD-2016-01514)	8 Mar 201600:00	–	cnvd
CVE	CVE-2016-1634	6 Mar 201602:00	–	cve
Cvelist	CVE-2016-1634	6 Mar 201602:00	–	cvelist
Debian	[SECURITY] [DSA 3507-1] chromium-browser security update	5 Mar 201621:22	–	debian
Debian	[SECURITY] [DSA 3507-1] chromium-browser security update	5 Mar 201621:22	–	debian
Debian CVE	CVE-2016-1634	6 Mar 201602:00	–	debiancve
Tenable Nessus	Debian DSA-3507-1 : chromium-browser - security update	7 Mar 201600:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (f85fa236-e2a6-412e-b5c7-c42120892de5)	7 Mar 201600:00	–	nessus
Tenable Nessus	GLSA-201603-09 : Chromium: Multiple vulnerabilities	14 Mar 201600:00	–	nessus

NVD

Node

google chromeRange≤48.0.2564.116

Source	Link
security	www.security.gentoo.org/glsa/201603-09
debian	www.debian.org/security/2016/dsa-3507
googlechromereleases	www.googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html
codereview	www.codereview.chromium.org/1556963002
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html
code	www.code.google.com/p/chromium/issues/detail
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html
securitytracker	www.securitytracker.com/id/1035185

06 May 2026 22:30Current

9.2High risk

Vulners AI Score9.2

CVSS 38.8

CVSS 29.3

EPSS0.01954