CVE-2015-6769

The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.

Affected products

Alt Linux, Google Chrome, Opera, Red Hat, Suse, Ubuntu, Webkit

Google Chrome

≤ 46.0.2490.86

CVSS 2.0

7.5 HIGH

EPSS

2.0% (79th percentile)

Weakness

CWE-264

NVD status

Modified

Published

2015-12-06