Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-1698
HistoryJun 05, 2016 - 11:59 p.m.

Design/Logic Flaw

2016-06-0523:59:00
PRIOn knowledge base
www.prio-n.com
5

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.6%

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.