CVE catalog

CVE-2015-1304

oxide-qt vulnerabilities

[CVE catalog]

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.76% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntu18.04libv8-3.143.14.5.8-11ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu16.04chromium-browser45.0.2454.101-0ubuntu1.1201UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu16.04libv8-3.143.14.5.8-5ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu16.04oxide-qt1.9.5-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser29.0.1547.65-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser31.0.1650.63-0ubuntu1~20131204.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser32.0.1700.107-0ubuntu1~20140204.977.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser33.0.1750.152-0ubuntu1~pkg995.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser34.0.1847.116-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser36.0.1985.125-0ubuntu1.14.04.0~pkg1029UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser37.0.2062.120-0ubuntu0.14.04.1~pkg1049UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser37.0.2062.94-0ubuntu0.14.04.1~pkg1042UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]

Showing 12 observations. All 68 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debian8chromium-browser41.0.2272.118-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser42.0.2311.135-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser42.0.2311.135-1~deb8u1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser42.0.2311.135-2UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser42.0.2311.90-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser42.0.2311.90-1~deb8u1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser42.0.2311.90-2UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.124-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.124-2UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.124-3UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.130-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.65-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.65-1~deb8u1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser43.0.2357.81-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser44.0.2403.107-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser44.0.2403.107-2UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser44.0.2403.157-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser44.0.2403.89-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser44.0.2403.89-1~deb8u1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser45.0.2454.101-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser45.0.2454.85-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser45.0.2454.85-1~deb8u1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser46.0.2490.13-1UnknownSource applicability is not established[DSA-3376-1]
Debian8chromium-browser46.0.2490.71-1~deb8u1UnknownSource applicability is not established[DSA-3376-1]
Ubuntu14.04chromium-browser29.0.1547.65-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser31.0.1650.63-0ubuntu1~20131204.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser32.0.1700.107-0ubuntu1~20140204.977.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser33.0.1750.152-0ubuntu1~pkg995.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser34.0.1847.116-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser36.0.1985.125-0ubuntu1.14.04.0~pkg1029UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser37.0.2062.120-0ubuntu0.14.04.1~pkg1049UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser37.0.2062.94-0ubuntu0.14.04.1~pkg1042UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser38.0.2125.111-0ubuntu0.14.04.1.1061UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser39.0.2171.65-0ubuntu0.14.04.1.1064UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser40.0.2214.111-0ubuntu0.14.04.1.1069UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser40.0.2214.94-0ubuntu0.14.04.1.1068UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser41.0.2272.76-0ubuntu0.14.04.1.1076UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser43.0.2357.130-0ubuntu0.14.04.1.1092UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser43.0.2357.81-0ubuntu0.14.04.1.1089UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser44.0.2403.89-0ubuntu0.14.04.1.1095UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser45.0.2454.101-0ubuntu0.14.04.1.1099UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04chromium-browser45.0.2454.85-0ubuntu0.14.04.1.1097UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu14.04oxide-qt1.0.0~bzr437-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.0~bzr452-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.0~bzr475-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.0~bzr490-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.0~bzr501-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.0~bzr501-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.4-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.0.5-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.1.2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.2.5-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.3.4-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.4.2-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.4.3-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.5.5-0ubuntu0.14.04.3UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.5.6-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.6.5-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.6.6-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.7.8-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.7.9-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.8.4-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.9.1-0ubuntu0.14.04.2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu14.04oxide-qt1.9.5-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304][USN-2757-1]
Ubuntu16.04chromium-browser45.0.2454.101-0ubuntu1.1201UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu16.04libv8-3.143.14.5.8-5ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu16.04oxide-qt1.9.5-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Ubuntu18.04libv8-3.143.14.5.8-11ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2015-1304]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "chromium-browser",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "45.0.2454.101-0ubuntu0.14.04.1.1099"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "29.0.1547.65-0ubuntu2",
        "31.0.1650.63-0ubuntu1~20131204.1",
        "32.0.1700.107-0ubuntu1~20140204.977.1",
        "33.0.1750.152-0ubuntu1~pkg995.1",
        "34.0.1847.116-0ubuntu2",
        "36.0.1985.125-0ubuntu1.14.04.0~pkg1029",
        "37.0.2062.94-0ubuntu0.14.04.1~pkg1042",
        "37.0.2062.120-0ubuntu0.14.04.1~pkg1049",
        "38.0.2125.111-0ubuntu0.14.04.1.1061",
        "39.0.2171.65-0ubuntu0.14.04.1.1064",
        "40.0.2214.94-0ubuntu0.14.04.1.1068",
        "40.0.2214.111-0ubuntu0.14.04.1.1069",
        "41.0.2272.76-0ubuntu0.14.04.1.1076",
        "43.0.2357.81-0ubuntu0.14.04.1.1089",
        "43.0.2357.130-0ubuntu0.14.04.1.1092",
        "44.0.2403.89-0ubuntu0.14.04.1.1095",
        "45.0.2454.85-0ubuntu0.14.04.1.1097"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1304",
      "fixed_version": "45.0.2454.101-0ubuntu0.14.04.1.1099",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1304",
      "provider_updated_at": "2026-04-22T10:03:11.388198Z",
      "applicability_unknown": true
    },
    {
      "name": "oxide-qt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5-0ubuntu0.14.04.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "1.0.0~bzr437-0ubuntu1",
        "1.0.0~bzr452-0ubuntu1",
        "1.0.0~bzr475-0ubuntu1",
        "1.0.0~bzr490-0ubuntu1",
        "1.0.0~bzr501-0ubuntu1",
        "1.0.0~bzr501-0ubuntu2",
        "1.0.4-0ubuntu0.14.04.1",
        "1.0.5-0ubuntu0.14.04.1",
        "1.1.2-0ubuntu0.14.04.1",
        "1.2.5-0ubuntu0.14.04.1",
        "1.3.4-0ubuntu0.14.04.1",
        "1.4.2-0ubuntu0.14.04.1",
        "1.4.3-0ubuntu0.14.04.1",
        "1.5.5-0ubuntu0.14.04.3",
        "1.5.6-0ubuntu0.14.04.2",
        "1.6.5-0ubuntu0.14.04.1",
        "1.6.6-0ubuntu0.14.04.1",
        "1.7.8-0ubuntu0.14.04.1",
        "1.7.9-0ubuntu0.14.04.1",
        "1.8.4-0ubuntu0.14.04.2",
        "1.9.1-0ubuntu0.14.04.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1304",
      "fixed_version": "1.9.5-0ubuntu0.14.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1304",
      "provider_updated_at": "2026-04-22T10:03:11.388198Z",
      "applicability_unknown": true
    },
    {
      "name": "chromium-browser",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "45.0.2454.101-0ubuntu1.1201"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1304",
      "fixed_version": "45.0.2454.101-0ubuntu1.1201",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1304",
      "provider_updated_at": "2026-04-22T10:03:11.388198Z",
      "applicability_unknown": true
    },
    {
      "name": "oxide-qt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5-0ubuntu1"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1304",
      "fixed_version": "1.9.5-0ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1304",
      "provider_updated_at": "2026-04-22T10:03:11.388198Z",
      "applicability_unknown": true
    },
    {
      "name": "libv8-3.14",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "3.14.5.8-5ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1304",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1304",
      "provider_updated_at": "2026-04-22T10:03:11.388198Z",
      "applicability_unknown": true
    },
    {
      "name": "libv8-3.14",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "3.14.5.8-11ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1304",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1304",
      "provider_updated_at": "2026-04-22T10:03:11.388198Z",
      "applicability_unknown": true
    },
    {
      "name": "chromium-browser",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "46.0.2490.71-1~deb8u1"
            }
          ]
        }
      ],
      "release": "8",
      "versions": [
        "41.0.2272.118-1",
        "42.0.2311.135-1",
        "42.0.2311.135-1~deb8u1",
        "42.0.2311.135-2",
        "42.0.2311.90-1",
        "42.0.2311.90-1~deb8u1",
        "42.0.2311.90-2",
        "43.0.2357.124-1",
        "43.0.2357.124-2",
        "43.0.2357.124-3",
        "43.0.2357.130-1",
        "43.0.2357.65-1",
        "43.0.2357.65-1~deb8u1",
        "43.0.2357.81-1",
        "44.0.2403.107-1",
        "44.0.2403.107-2",
        "44.0.2403.157-1",
        "44.0.2403.89-1",
        "44.0.2403.89-1~deb8u1",
        "45.0.2454.101-1",
        "45.0.2454.85-1",
        "45.0.2454.85-1~deb8u1",
        "46.0.2490.13-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DSA-3376-1",
      "fixed_version": "46.0.2490.71-1~deb8u1",
      "provider_source": "pypi",
      "provider_record_id": "DSA-3376-1",
      "provider_updated_at": "2026-03-09T01:18:57.528878Z",
      "applicability_unknown": true
    },
    {
      "name": "oxide-qt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5-0ubuntu0.14.04.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "1.0.0~bzr437-0ubuntu1",
        "1.0.0~bzr452-0ubuntu1",
        "1.0.0~bzr475-0ubuntu1",
        "1.0.0~bzr490-0ubuntu1",
        "1.0.0~bzr501-0ubuntu1",
        "1.0.0~bzr501-0ubuntu2",
        "1.0.4-0ubuntu0.14.04.1",
        "1.0.5-0ubuntu0.14.04.1",
        "1.1.2-0ubuntu0.14.04.1",
        "1.2.5-0ubuntu0.14.04.1",
        "1.3.4-0ubuntu0.14.04.1",
        "1.4.2-0ubuntu0.14.04.1",
        "1.4.3-0ubuntu0.14.04.1",
        "1.5.5-0ubuntu0.14.04.3",
        "1.5.6-0ubuntu0.14.04.2",
        "1.6.5-0ubuntu0.14.04.1",
        "1.6.6-0ubuntu0.14.04.1",
        "1.7.8-0ubuntu0.14.04.1",
        "1.7.9-0ubuntu0.14.04.1",
        "1.8.4-0ubuntu0.14.04.2",
        "1.9.1-0ubuntu0.14.04.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-2757-1",
      "fixed_version": "1.9.5-0ubuntu0.14.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-2757-1",
      "provider_updated_at": "2026-02-10T04:40:55Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]