CVE-2015-1210: Medium severity google chrome vulnerability
The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1210?
CVE-2015-1210 is classified as a high severity vulnerability impacting multiple versions of Google Chrome.
How do I fix CVE-2015-1210?
To fix CVE-2015-1210, update Google Chrome to version 40.0.2214.111 or newer on Windows and OS X, or version 40.0.2214.109 or newer on Android.
What are the affected versions related to CVE-2015-1210?
CVE-2015-1210 affects Google Chrome versions prior to 40.0.2214.111 on desktop and 40.0.2214.109 on Android.
Does CVE-2015-1210 affect Linux distributions?
CVE-2015-1210 can affect specific versions of Google Chrome running on Linux, specifically those before 40.0.2214.111.
Who is impacted by CVE-2015-1210?
Users of Google Chrome, particularly those on older versions of the browser, are impacted by CVE-2015-1210.