Bypass security restrictions vulnerabilities in Google Chrome

Description

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions.

Below is a complete list of vulnerabilities

1. Improper DNS hostnames handling can be exploited remotely via a specially designed hostname string;
2. Improper DOM wrapper creation can be exploited remotely via a specially designed JavaScript;
3. Improper URL associations detection can be exploited remotely via a specially designed URL.

Original advisories

• Blog entry

Related products

• Google-Chrome

CVE list

• CVE-2015-1266
  critical
• CVE-2015-1267
  critical
• CVE-2015-1268
  critical
• CVE-2015-1269
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com