chromium -- multiple vulnerabilitiesentered 2016-03-05
no CVE referenced
CVE details
CVE-2016-1636
The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource.
- Score
- 9.8 critical
- Published
- 2016-03-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.