CVE-2016-1638

MEDIUM · CVSS 6.3 EPSS 1.05%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-03-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-1638

Severity

MEDIUM

CVSS

6.3

EPSS

1.05%

Chrome

Original NVD Description

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.