View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-1677 medium priority: Ubuntu including 4 source packages (chromium-browser, libv8, libv8-3.14, oxide-qt), 40 status rows across 10 suites (artful, bionic, cosmic, precise, trusty, upstream, wily, xenial, yakkety, zesty): released 15, DNE 13, ignored 10, needed 1, needs-triage 1.
uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."