CVE-2016-1648: Debian Linux

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.

Affected products

• Debian Debian Linux: version 8.0 only
• Google Chrome: up to and including 49.0.2623.95
• Opensuse Opensuse: version 13.1 only

Published 2016-03-29. Last modified 2026-06-17.