7527 matches found
USN-2905-1: Oxide vulnerability
A security issue was discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions or a sandbox protection mechanism. CVE-2016-1629...
chromium-browser: same-origin bypass in Blink and Sandbox escape in Chrome
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
Google Chrome Extensions Subsystem Homology Policy Bypass Vulnerability
Google Chrome is a popular web browser. Google Chrome's Extensions subsystem fails to restrict the use of the Object.defineProperty method to rewrite build-in extension code, which can be exploited by remote attackers to bypass the same-origin policy using specially crafted JavaScript code...
Google Chrome DOM Homology Policy Bypass Vulnerability (CNVD-2016-01234)
Google Chrome is a popular web browser. Google Chrome's DOM implementation process fails to properly handle the execution order of frame-attach and frame-detach operations, allowing remote attackers to build specially crafted Web sites to bypass the same-origin policy...
Comodo Chromodo Homologation Policy Security Bypass Vulnerability
Comodo Chromodo is a Chromium-based browser product. Comodo Chromodo suffers from a same-origin policy security bypass vulnerability that could be exploited by an attacker to bypass access restrictions, obtain sensitive data, or execute arbitrary code in the browser context to steal sensitive...
Google Chrome Security Restriction Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 48.0.2564.116. A remote attacker can exploit this vulnerability to bypass the Blink same-origin policy and the sandbox protection mechanism...
Debian DSA-3486-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1622 It was discovered that a maliciously crafted extension could bypass the Same Origin Policy. - CVE-2016-1623 Mariusz Mlynski discovered a way to bypass the Same Origin Policy. - CVE-2016-1624 lukezli discover...
openSUSE Security Update : Chromium (openSUSE-2016-238)
This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...
[SECURITY] [DSA 3486-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3486-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 21, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3486-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3486-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 21, 2016 https://www.debian.org/security/faq -...
CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
Design/Logic Flaw
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
CVE-2016-1629
Google Chrome before 48.0.2564.116 is affected by CVE-2016-1629, a vulnerability in the Blink/Same Origin Policy and sandbox where a remote attacker could bypass SOP and escape the sandbox via unspecified vectors. The issue is mitigated by upgrading to Chrome 48.0.2564.116 or later (as reflected ...
CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
CVE-2016-1629
Removed by vendor...
CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
DSA-3486-1 chromium-browser - security update
Bulletin has no description...
