chromium -- multiple vulnerabilitiesentered 2015-12-02
no CVE referenced
CVE details
CVE-2015-6772
The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin.
- Score
- 7.5 high
- Published
- 2015-12-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.