CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate…

published June 5, 2016

CVSS
—
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.0th percentile
Published
2016-06-05T23:00Z
EPSS history
Timeline
  • 05 JUN 23:00Z
    The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate…
    cvelistv5