CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability
Summary: CVE-2016-1646 is an out-of-bounds read vulnerability in the Google Chromium V8 engine that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. The flaw could affect multiple browsers built on Chromium, including Google Chrome, Microsoft Edge, and Opera, and CISA set a remediation due date of 2022-06-22.
What you should know: The same V8 engine sits inside Chrome, Edge, and Opera, so one unpatched browser on a single endpoint carries this flaw across the browsers your users assume are separate; CISA's catalog lists known ransomware campaign use as unknown, meaning the exploitation picture is not confirmed either way.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-1646Google
- Related
- CVE-2026-125350: Google Chromium Use-After-Free Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026CVE-2026-58704: Google Pixel Improper Authorization Vulnerability Known Exploited Vulnerabilities · Sep 16, 2026