CVE-2016-1665

The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
opensuseopensuse
13.1
redhatenterprise_linux_desktop_supplementary
6.0
redhatenterprise_linux_server_supplementary
6.0
redhatenterprise_linux_server_supplementary_eus
6.7z:z
redhatenterprise_linux_workstation_supplementary
6.0
googlechrome
𝑥
≤ 50.0.2661.87
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
cosmic
Fixed 50.0.2661.102-0ubuntu1.1242
released
bionic
Fixed 50.0.2661.102-0ubuntu1.1242
released
artful
Fixed 50.0.2661.102-0ubuntu1.1242
released
zesty
Fixed 50.0.2661.102-0ubuntu1.1242
released
yakkety
Fixed 50.0.2661.102-0ubuntu1.1242
released
xenial
Fixed 50.0.2661.102-0ubuntu0.16.04.1.1237
released
wily
Fixed 50.0.2661.102-0ubuntu0.15.10.1.1227
released
trusty
Fixed 50.0.2661.102-0ubuntu0.14.04.1.1117
released
precise
ignored
libv8
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
trusty
dne
precise
ignored
libv8-3.14
cosmic
ignored
bionic
ignored
artful
ignored
zesty
ignored
yakkety
ignored
xenial
ignored
wily
ignored
trusty
dne
precise
dne
oxide-qt
cosmic
dne
bionic
dne
artful
Fixed 1.14.9-0ubuntu1
released
zesty
Fixed 1.14.9-0ubuntu1
released
yakkety
Fixed 1.14.9-0ubuntu1
released
xenial
Fixed 1.14.8-0ubuntu0.16.04.1
released
wily
Fixed 1.14.8-0ubuntu0.15.10.1
released
trusty
Fixed 1.14.8-0ubuntu0.14.04.1
released
precise
dne