← Back

CVE-2009-0276

nvd nist
Published: Feb 3, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame.

Affected (12)

Products: Google: Chrome
1 product
Chrome
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Google
Up to 1.0.154.43
Version 0.2.152.1
Version 0.2.153.1
Version 0.3.154.0
Version 0.3.154.3
Version 0.4.154.18
Version 0.4.154.22
Version 0.4.154.31
Version 0.4.154.33
Version 1.0.154.36
Version 1.0.154.39
Version 1.0.154.42

Timeline

No history available yet.