CVE-2009-0276

Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a…

published February 3, 2009

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01166 · 67.1th percentile
Published
2009-02-03T19:00Z
EPSS history
Timeline
  • 03 FEB 19:00Z
    Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a…
    cvelistv5