CVE-2016-1665

EUVD-2016-2760
The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
opensuseopensuse
13.1
redhatenterprise_linux_desktop_supplementary
6.0
redhatenterprise_linux_server_supplementary
6.0
redhatenterprise_linux_server_supplementary_eus
6.7z:z
redhatenterprise_linux_workstation_supplementary
6.0
googlechrome
𝑥
≤ 50.0.2661.87
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
artful
Fixed 50.0.2661.102-0ubuntu1.1242
released
bionic
Fixed 50.0.2661.102-0ubuntu1.1242
released
cosmic
Fixed 50.0.2661.102-0ubuntu1.1242
released
precise
ignored
trusty
Fixed 50.0.2661.102-0ubuntu0.14.04.1.1117
released
wily
Fixed 50.0.2661.102-0ubuntu0.15.10.1.1227
released
xenial
Fixed 50.0.2661.102-0ubuntu0.16.04.1.1237
released
yakkety
Fixed 50.0.2661.102-0ubuntu1.1242
released
zesty
Fixed 50.0.2661.102-0ubuntu1.1242
released
libv8
artful
dne
bionic
dne
cosmic
dne
precise
ignored
trusty
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne
libv8-3.14
artful
ignored
bionic
ignored
cosmic
ignored
precise
dne
trusty
dne
wily
ignored
xenial
ignored
yakkety
ignored
zesty
ignored
oxide-qt
artful
Fixed 1.14.9-0ubuntu1
released
bionic
dne
cosmic
dne
precise
dne
trusty
Fixed 1.14.8-0ubuntu0.14.04.1
released
wily
Fixed 1.14.8-0ubuntu0.15.10.1
released
xenial
Fixed 1.14.8-0ubuntu0.16.04.1
released
yakkety
Fixed 1.14.9-0ubuntu1
released
zesty
Fixed 1.14.9-0ubuntu1
released