Vulnerability in Google Chrome

CVE-2009-1414

Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors.

EPSS: 0.004 (36.7th percentile) — read the EPSS interpretation.

Affected products

Google Chrome — versions 2.0.156.1, 2.0.157.0, 2.0.157.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)