CVE-2016-5132
EUVD-2016-608323.07.2016, 19:59
The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 51.0.2704.106 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||
| oxide-qt |
|
Common Weakness Enumeration
References