Exploited vulnerability

CVE-2016-1646

TLP:CLEAR

Google Chromium V8 Out-of-Bounds Read Vulnerability

Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Facts

Vendor: Google
Product: Chromium V8
CVSS: 8.8
EPSS (probability of exploitation within 30 days): 48.1 %
On CISA's Known Exploited Vulnerabilities list since: 8 June 2022
First known exploitation: 8 June 2022
CISA's deadline for US federal agencies: 22 June 2022
Weakness: CWE-119
First seen by Risk Letters: 8 June 2022

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD