Lucene search

K
cvelistChromeCVELIST:CVE-2015-1285
HistoryJul 23, 2015 - 12:00 a.m.

CVE-2015-1285

2015-07-2300:00:00
Chrome
www.cve.org
8

AI Score

8.7

Confidence

High

EPSS

0.004

Percentile

72.7%

The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.