Launchpad.net

CVE 2015-1293

The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

See the CVE page on Mitre.org for more details.