CVE-2016-1708: Google Chrome

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.

Affected products

• Google Chrome: up to and including 51.0.2704.106

Published 2016-07-23. Last modified 2026-06-17.