CVE-2015-1281

core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows…

published July 23, 2015

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01710 · 77.0th percentile
Published
2015-07-23T00:00Z
EPSS history
Timeline
  • 23 JUL 00:00Z
    core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows…
    cvelistv5