CVE-2016-1623

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp,...

PT-2016-1261

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.109 Opera affected versions not specified Description The issue is related to the DOM implementation in the browser, which does not properly restrict frame-attach operations from occurring during or...