CVE-2016-1668 in Google Chrome
Summary
The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Reservation
01/12/2016
Disclosure
05/14/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87299 | Google Chrome Blink V8 Binding access control | 284 | Not defined | Official fix | CVE-2016-1668 |