CVE-2016-1670

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.102 Opera (affected versions not specified)

Description The issue is related to a race condition in the ResourceDispatcherHostImpl::BeginRequest function, which allows remote attackers to make arbitrary HTTP requests. This is achieved by leveraging access to a renderer process and reusing a request ID.

Recommendations For Google Chrome versions prior to 50.0.2661.102, update to version 50.0.2661.102 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.