Lucene search

K
cvelistChromeCVELIST:CVE-2014-7939
HistoryJan 22, 2015 - 10:00 p.m.

CVE-2014-7939

2015-01-2222:00:00
Chrome
www.cve.org
5

AI Score

9.1

Confidence

High

EPSS

0.005

Percentile

76.0%

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an “X-Content-Type-Options: nosniff” header.

AI Score

9.1

Confidence

High

EPSS

0.005

Percentile

76.0%