CVE-2016-1657

MEDIUM · CVSS 4.3 EPSS 1.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-04-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-1657

Severity

MEDIUM

CVSS

4.3

EPSS

1.43%

Chrome

Original NVD Description

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.