CVE-2016-1657: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.

Affected products

• Debian Debian Linux: version 8.0 only
• Google Chrome: up to and including 49.0.2623.112
• Novell Suse Package Hub For Suse Linux Enterprise: version 12 only
• Opensuse Leap: version 42.1 only

Published 2016-04-18. Last modified 2026-06-17.