High severity8.8NVD Advisory· Published Feb 14, 2016· Updated May 6, 2026
CVE-2016-1622
CVE-2016-1622
Description
The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
Affected products
3- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-02/msg00104.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-02/msg00119.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0241.htmlnvd
- www.debian.org/security/2016/dsa-3486nvd
- www.securityfocus.com/bid/83125nvd
- www.securitytracker.com/id/1035183nvd
- code.google.com/p/chromium/issues/detailnvd
- codereview.chromium.org/1417513003nvd
- security.gentoo.org/glsa/201603-09nvd
News mentions
0No linked articles in our index yet.