CVE-2015-1291

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a…

published September 3, 2015

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01678 · 76.7th percentile
Published
2015-09-03T22:00Z
EPSS history
Timeline
  • 03 SEP 22:00Z
    The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a…
    cvelistv5