CVE-2015-6772
06.12.2015, 01:59
The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin.Enginsight
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 46.0.2490.86 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||
| oxide-qt |
|
Common Weakness Enumeration
References