CVE-2016-1616

The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.

Date published : 2016-01-25

http://www.securityfocus.com/bid/81430

http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html