4 matches found
CVE-2015-1304
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a 1 observe or 2 getNotifier call...
CVE-2015-1304: Improper Access Control
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a 1 observe or 2 getNotifier call...
UBUNTU-CVE-2015-1304
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a 1 observe or 2 getNotifier call...
PT-2015-2318
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.101 Opera affected versions not specified Description The issue is related to insufficient access control in the Google V8 component of Google Chrome, allowing remote attackers to bypass the Same Origi...