CVE-2017-15402

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the pagestate of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially...

CVE-2017-15402

CVE-2017-15402 affects Google Chrome on Chrome OS prior to 62.0.3202.74. A compromised renderer could control an ID used across frames, allowing any frame to overwrite another frame’s page_state within the same process, potentially enabling a sandbox escape via a crafted HTML page. The issue is c...