CVE-2015-1274

chromium-browser: Settings allowed executable files to run immediately after download in unsepcified

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to download_commands.cc and download_prefs.cc.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 4 more

CVE-2015-1275

chromium-browser: UXSS in Chrome for Android.

Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka "Universal XSS (UXSS)."

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed

Vendors

Google Opensuse

Products

Android Chrome Opensuse

CVE-2015-1276

chromium-browser: Use-after-free in IndexedDB.

Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1277

chromium-browser: Use-after-free in accessibility.

Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1278

chromium-browser: URL spoofing using pdf files in unspecified

content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1289

chromium-browser: Various fixes from internal audits, fuzzing and other initiatives

Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1279

chromium-browser: Heap-buffer-overflow in pdfium.

Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1280

chromium-browser: Memory corruption in skia

SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1281

chromium-browser: CSP bypass in unspecified component

core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1282

chromium-browser: Use-after-free in pdfium.

Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1283

chromium-browser: Heap-buffer-overflow in expat.

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

CVSS 2.0 · 6.8 Medium EPSS 18.3% KEV · Not listed

Vendors

Canonical Debian Google and 6 more

Products

Ubuntu Linux Debian Linux Chrome and 11 more

CVE-2015-1292

chromium-browser: Cross-origin bypass in ServiceWorker

The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1284

chromium-browser: Use-after-free in blink.

The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page's maximum number of frames, which allows remote attackers to cause a denial of service (invalid count value and use-after-free) or possibly have unspecified other impact via crafted JavaScript code that makes many createElement calls for IFRAME elements.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Google Opensuse Redhat

Products

Chrome Opensuse Enterprise Linux Desktop Supplementary and 3 more

CVE-2015-1285

chromium-browser: Information leak in XSS auditor.

The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1286

chromium-browser: UXSS in blink.

Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context restriction, aka a Blink "Universal XSS (UXSS)."

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1287

chromium-browser: SOP bypass with CSS in unspecified

Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1288

chromium-browser: Spell checking dictionaries fetched over HTTP in unspecified

The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related issue to CVE-2015-1263.

CVSS 2.0 · 6.8 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1294

chromium-browser: Use-after-free in Skia

Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering the use of matrix elements that lead to an infinite result during an inversion calculation.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1295

chromium-browser: Use-after-free in Printing

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_helper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC messages during preparation for printing, as demonstrated by messages associated with PDF documents in conjunction with messages about printer capabilities.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1296

chromium-browser: Character spoofing in omnibox

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a URL, as demonstrated by the omnibox in localizations for right-to-left languages.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras