7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
89.8%
10/13/2015
Critical
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions cause denial of service or obtain sensitive information.
Google Chrome versions earlier than 46.0.2490.71 (all branches)
Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Chrome
OSI
CVE-2015-67637.5Critical
CVE-2015-78347.5Critical
CVE-2015-67577.5Critical
CVE-2015-67586.8High
CVE-2015-67557.5Critical
CVE-2015-67566.8High
CVE-2015-67616.8High
CVE-2015-67627.5Critical
CVE-2015-67595.0Critical
CVE-2015-67607.5Critical
Public exploits exist for this vulnerability.
feedproxy.google.com/~r/GoogleChromeReleases/~3/NJ-cORsAqzQ/stable-channel-update.html
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6755
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6756
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6757
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6758
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6759
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6760
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6761
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6762
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6763
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7834
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Google-Chrome/
www.google.com/chrome/