Google V8 in Google Chrome vulnerabilities
3 known CVE vulnerabilities in Google V8 in Google Chrome, translated and rated.
- CVE-2015-6771High
In Google V8, used in Google Chrome before version 47.0.2526.73, there is an improper implementation of certain map and filter operations for arrays, which may lead to denial of service (out-of-bounds memory access) or possibly other unspecified impacts via crafted JavaScript code.
- CVE-2015-1304High
The object-observe.js file in Google V8, used in Google Chrome before version 45.0.2454.101, does not properly restrict method calls on access-checked objects. This allows remote attackers to bypass the Same Origin Policy via observe or getNotifier calls.
- CVE-2014-1716High
The XSS vulnerability in the Runtime_SetPrototype function in Google V8, used in Google Chrome before version 34.0.1847.116, allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.