Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-1668

Опубликовано: 11 мая 2016
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1335448chromium-browser: same origin bypass in blink v8 bindings

EPSS

Процентиль: 79%
0.01195
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 9 лет назад

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS3: 8.8
nvd
больше 9 лет назад

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS3: 8.8
debian
больше 9 лет назад

The forEachForBinding function in WebKit/Source/bindings/core/v8/Itera ...

CVSS3: 8.8
github
больше 3 лет назад

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

suse-cvrf
больше 9 лет назад

Security update for Chromium

EPSS

Процентиль: 79%
0.01195
Низкий

6.8 Medium

CVSS2