PT-2016-4896
CVE-2016-1668
·
تاريخ النشر
2016-05-11
·
تاريخ التحديث
2025-09-29
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 50.0.2661.102
Opera (affected versions not specified)
Description
The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to the improper creation context used by the
forEachForBinding function in the V8 bindings in Blink.Recommendations
For Google Chrome versions prior to 50.0.2661.102, update to version 50.0.2661.102 or later.
For Opera, at the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾