CVE-2016-1623

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach…

published February 14, 2016

CVSS
—
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01179 · 67.2th percentile
Published
2016-02-14T02:00Z
EPSS history
Timeline
  • 14 FEB 02:00Z
    The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach…
    cvelistv5