CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or…

published February 14, 2016

CVSS
—
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01197 · 67.7th percentile
Published
2016-02-14T02:00Z
EPSS history
Timeline
  • 14 FEB 02:00Z
    The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or…
    cvelistv5