chromium -- multiple vulnerabilitiesentered 2016-05-28
no CVE referenced
CVE details
CVE-2016-1692
WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
- Score
- 5.3 medium
- Published
- 2016-06-05
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.