CVE-2015-1268

bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM…

published June 26, 2015

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02519 · 84.6th percentile
Published
2015-06-26T14:00Z
EPSS history
Timeline
  • 26 JUN 14:00Z
    bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM…
    cvelistv5