CVE-2015-1267

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

CVE-2015-1267: Undefined Security Weakness

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

PT-2015-1422

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.130 Description The issue is related to errors in security settings of the Blink component in Google Chrome, allowing a remote attacker to bypass access restrictions using JavaScript that utilizes the...