CVE catalog

CVE-2016-1661

UBUNTU-CVE-2016-1661

[CVE catalog]

Severity
High · CVSS 8CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.24% · Oct 25, 2026

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuchromium-browser14.0429.0.1547.65-0ubuntu2vulnerable
Ubuntuchromium-browser14.0431.0.1650.63-0ubuntu1~20131204.1vulnerable
Ubuntuchromium-browser14.0432.0.1700.107-0ubuntu1~20140204.977.1vulnerable
Ubuntuchromium-browser14.0433.0.1750.152-0ubuntu1~pkg995.1vulnerable
Ubuntuchromium-browser14.0434.0.1847.116-0ubuntu2vulnerable
Ubuntuchromium-browser14.0436.0.1985.125-0ubuntu1.14.04.0~pkg1029vulnerable
Ubuntuchromium-browser14.0437.0.2062.94-0ubuntu0.14.04.1~pkg1042vulnerable
Ubuntuchromium-browser14.0437.0.2062.120-0ubuntu0.14.04.1~pkg1049vulnerable
Ubuntuchromium-browser14.0438.0.2125.111-0ubuntu0.14.04.1.1061vulnerable
Ubuntuchromium-browser14.0439.0.2171.65-0ubuntu0.14.04.1.1064vulnerable
Ubuntuchromium-browser14.0440.0.2214.94-0ubuntu0.14.04.1.1068vulnerable
Ubuntuchromium-browser14.0440.0.2214.111-0ubuntu0.14.04.1.1069vulnerable
Ubuntuchromium-browser14.0441.0.2272.76-0ubuntu0.14.04.1.1076vulnerable
Ubuntuchromium-browser14.0443.0.2357.81-0ubuntu0.14.04.1.1089vulnerable
Ubuntuchromium-browser14.0443.0.2357.130-0ubuntu0.14.04.1.1092vulnerable
Ubuntuchromium-browser14.0444.0.2403.89-0ubuntu0.14.04.1.1095vulnerable
Ubuntuchromium-browser14.0445.0.2454.85-0ubuntu0.14.04.1.1097vulnerable
Ubuntuchromium-browser14.0445.0.2454.101-0ubuntu0.14.04.1.1099vulnerable
Ubuntuchromium-browser14.0447.0.2526.73-0ubuntu0.14.04.1.1106vulnerable
Ubuntuchromium-browser14.0447.0.2526.106-0ubuntu0.14.04.1.1107vulnerable
Ubuntuchromium-browser14.0448.0.2564.82-0ubuntu0.14.04.1.1108vulnerable
Ubuntuchromium-browser14.0448.0.2564.116-0ubuntu0.14.04.1.1111vulnerable
Ubuntuchromium-browser14.0449.0.2623.87-0ubuntu0.14.04.1.1112vulnerable
Ubuntuchromium-browser14.0449.0.2623.108-0ubuntu0.14.04.1.1113vulnerable
Ubuntuchromium-browser14.0450.0.2661.102-0ubuntu0.14.04.1.1117fixed
Ubuntuchromium-browser16.0445.0.2454.101-0ubuntu1.1201vulnerable
Ubuntuchromium-browser16.0447.0.2526.73-0ubuntu1.1218vulnerable
Ubuntuchromium-browser16.0447.0.2526.106-0ubuntu1.1221vulnerable
Ubuntuchromium-browser16.0448.0.2564.82-0ubuntu1.1222vulnerable
Ubuntuchromium-browser16.0448.0.2564.116-0ubuntu1.1229vulnerable
Ubuntuchromium-browser16.0449.0.2623.87-0ubuntu1.1232vulnerable
Ubuntuchromium-browser16.0449.0.2623.108-0ubuntu1.1233vulnerable
Ubuntuchromium-browser16.0450.0.2661.102-0ubuntu0.16.04.1.1237fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuchromium-browserdeb14.0450.0.2661.102-0ubuntu0.14.04.1.1117Not reportedUBUNTU-CVE-2016-1661Not reported
Ubuntuchromium-browserdeb16.0450.0.2661.102-0ubuntu0.16.04.1.1237Not reportedUBUNTU-CVE-2016-1661Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]