AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2016-1667

HIGH · CVSS 8.8 EPSS 2.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-05-14 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2016-1667
Severity
HIGH
CVSS
8.8
EPSS
2.09%
Chrome

Original Filing — NVD Description

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.