CVE-2016-1658: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

Affected products

• Debian Debian Linux: version 8.0 only
• Google Chrome: up to and including 49.0.2623.112
• Novell Suse Package Hub For Suse Linux Enterprise: version 12 only
• Opensuse Leap: version 42.1 only

Published 2016-04-18. Last modified 2026-06-17.