chromium -- multiple vulnerabilitiesentered 2015-09-27
no CVE referenced
CVE details
CVE-2015-1304
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.
- Score
- 7.5 high
- Published
- 2015-10-12
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.