CVE-2015-1293
chromium-browser: Cross-origin bypass in DOM
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Vulnerabilidad en la implementación DOM en Blink, cómo se utiliza en Google Chrome en versiones anteriores a 45.0.2454.85, permite a atacantes remotos eludir the Same Origin Policy a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-21 CVE Reserved
- 2015-09-03 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html | X_refsource_confirm | |
| http://www.securitytracker.com/id/1033472 | Vdb Entry | |
| https://code.google.com/p/chromium/issues/detail?id=524074 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2015-09/msg00029.html | 2023-11-07 | |
| http://lists.opensuse.org/opensuse-updates/2015-11/msg00013.html | 2023-11-07 | |
| http://rhn.redhat.com/errata/RHSA-2015-1712.html | 2023-11-07 | |
| http://www.debian.org/security/2015/dsa-3351 | 2023-11-07 | |
| https://security.gentoo.org/glsa/201603-09 | 2023-11-07 | |
| https://access.redhat.com/security/cve/CVE-2015-1293 | 2015-09-03 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1259161 | 2015-09-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | <= 44.0.2403 Search vendor "Google" for product "Chrome" and version " <= 44.0.2403" | - |
Affected
| ||||||