{"schema":"threatline.record/2","record":{"id":"CVE-2016-1646","aliases":[],"summary":"Google Chromium V8 Out-of-Bounds Read Vulnerability","details":"Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","categories":["Applications & CMS"],"product":"Chromium V8","vendor":"Google","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2016-1646","source_modified_at":"2025-10-21T23:55:54.355Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":8.8,"severity":"High","kev":{"listed":true,"date_added":"2022-06-08","due_date":"2022-06-22","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.4811,"percentile":0.98858,"score_date":"2026-10-23"},"published_at":"2016-03-29T10:00:00.000Z","modified_at":"2025-10-21T23:55:54.355Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2016-1646","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:55:54.355Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2016-1646","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1646","source":"CISA KEV"},{"source":"CVE List","url":"https://codereview.chromium.org/1804963002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://code.google.com/p/chromium/issues/detail?id=594574","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://security.gentoo.org/glsa/201605-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1646","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2025-01-29T17:19:02.506820Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T23:55:54.355Z","content_hash":"14cbb8e6a26c4d92cdd25cb417c4e5d1685eb6a3177c62285e4ced86c21a70d3"}}