CVE-2015-1304

CVE-2015-1304 describes a Same Origin Policy bypass vulnerability in Google Chrome versions prior to 45.0.2454.101. This flaw, residing in the V8 JavaScript engine's object-observe.js, allowed remote attackers to circumvent security restrictions by improperly calling observe or getNotifier methods on access-checked objects. With a CVSS score of 7.5, this vulnerability is considered high severity, enabling potential compromise of confidentiality, integrity, and availability with low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion and media coverage.