Medium severity4.3NVD Advisory· Published Apr 18, 2016· Updated Jun 17, 2026
CVE-2016-1657
CVE-2016-1657
Description
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
10- googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0638.htmlnvd
- www.debian.org/security/2016/dsa-3549nvd
- codereview.chromium.org/1678233003/nvd
- crbug.com/567445nvd
- security.gentoo.org/glsa/201605-02nvd
News mentions
0No linked articles in our index yet.