CVE-2016-1635

Critical

Published: 06/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Google Chrome before version 49.0.2623.75, there is an issue with object lifetimes and re-entrancy in the OnDocumentElementCreated handling. This can lead to denial of service (use-after-free) or other unspecified impacts.

Risk Assessment

Remote attackers may exploit this vulnerability to cause browser crashes, potentially leading to service unavailability for users.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.