Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-1657
HistoryApr 18, 2016 - 12:00 a.m.

CVE-2016-1657

2016-04-1800:00:00
ubuntu.com
ubuntu.com
8

0.003 Low

EPSS

Percentile

71.4%

The WebContentsImpl::FocusLocationBarByDefault function in
content/browser/web_contents/web_contents_impl.cc in Google Chrome before
50.0.2661.75 mishandles focus for certain about:blank pages, which allows
remote attackers to spoof the address bar via a crafted URL.

Notes

Author Note
chrisccoulson This logic for focusing the location bar in Chrome is not used in Oxide
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchchromium-browser< 50.0.2661.102-0ubuntu0.14.04.1.1117UNKNOWN
ubuntu15.10noarchchromium-browser< 50.0.2661.102-0ubuntu0.15.10.1.1227UNKNOWN
ubuntu16.04noarchchromium-browser< 50.0.2661.102-0ubuntu0.16.04.1.1237UNKNOWN