The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Chrome | * | 46.0.2490.86 |