PT-2016-4896
CVE-2016-1668
·
Publicado
2016-05-11
·
Atualizado
2025-09-29
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 50.0.2661.102
Opera (affected versions not specified)
Description
The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to the improper creation context used by the
forEachForBinding function in the V8 bindings in Blink.Recommendations
For Google Chrome versions prior to 50.0.2661.102, update to version 50.0.2661.102 or later.
For Opera, at the moment, there is no information about a newer version that contains a fix for this issue.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾