CVE-2016-1629

CRITICAL 9.8CVE-2016-1629 · Published 21/02/2016 · updated 17/06/2026

In short

CVE-2016-1629 is a CRITICAL (CVSS 9.8) vulnerability affecting chrome (google), suse package hub for suse linux enterprise (novell).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
chrome google	`≤ 48.0.2564.109`	No fix yet
suse package hub for suse linux enterprise novell	`= 12`	No fix yet

Description

Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.

References

googlechromereleases.blogspot.com/2016/02/stable-channel-update_18.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00045.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00047.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00048.html
rhn.redhat.com/errata/RHSA-2016-0286.html
debian.org/security/2016/dsa-3486
securityfocus.com/bid/83302
securitytracker.com/id/1035184
ubuntu.com/usn/USN-2905-1
code.google.com/p/chromium/issues/detail
security.gentoo.org/glsa/201603-09

More vulnerabilities in chrome

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free