{"id":"CVE-2016-1677","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-1677","generatedAt":"2026-10-27T17:57:02.019Z","title":"uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"","description":"uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"","published":"2016-06-05T23:59:06.000Z","lastModified":"2026-06-17T00:42:24.000Z","status":"Modified","sourceIdentifier":"chrome-cve-admin@google.com","cvss":{"version":"3.0","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},"cwe":["CWE-200"],"affected":["google/chrome","canonical/ubuntu linux","debian/debian linux","opensuse/leap","opensuse/opensuse","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux workstation","suse/linux enterprise","google/v8"],"epss":{"score":0.03051,"percentile":0.87478,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (3.05%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/90876","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1035981","source":"chrome-cve-admin@google.com"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"chrome-cve-admin@google.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"chrome-cve-admin@google.com"},{"url":"https://codereview.chromium.org/1936083002","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/602970","source":"chrome-cve-admin@google.com"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2992-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.chromium.org/1936083002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/602970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201607-07","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-1677","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}