CVE-2016-1697

The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

Affected products

Alt Linux, Blink, Google Chrome, Opera, Red Hat, Suse, Ubuntu

Google Chrome

≤ 51.0.2704.63

Fix

Available

CVSS 3.0

8.8 HIGH

EPSS

2.1% (80th percentile)

Weakness

CWE-284

NVD status

Modified

Published

2016-06-05