The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade chromiumUpgrade chromium-npapiUpgrade chromium-pulse | Dec 10, 2025 | Oct 13, 2015 |
| Gentoo Linux | — | Upgrade www-client/chromium. | Oct 30, 2017 | Oct 15, 2015 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Oct 22, 2015 | Oct 13, 2015 |
| Suse | — | Upgrade chromium | Dec 18, 2015 | Oct 15, 2015 |
| Ubuntu | — | Upgrade liboxideqtcore0 | Nov 8, 2024 | Oct 15, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub