CVE-2016-1697: Improper Access Control

The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScrip...

chromium-browser: cross-origin bypass in blink

The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScrip...

PT-2016-2141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.79 Opera versions prior to 51.0.2704.79 Description The issue is related to the FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, which does not prevent frame...