Design/Logic Flaw

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

Design/Logic Flaw

core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask...

Buffer overflow

platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service container overflow or...

CVE-2015-1253

CVE-2015-1253 affects Google Chrome (Blink DOM implementation). The vulnerability lies in core/html/parser/HTMLConstructionSite.cpp, allowing a cross-origin policy bypass by crafted JavaScript that appends to a SCRIPT element, related to insert and executeReparentTask. Impact is a Same Origin Pol...

CVE-2015-1254

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2015-1257

CVE-2015-1257 affects Blink’s SVG FEColorMatrix.cpp. The vulnerability arises from insufficient values handling in an feColorMatrix filter, enabling remote attackers to cause a Denial of Service (container overflow) via a crafted document. The issue is documented across multiple sources (Chromium...

CVE-2015-1262

Removed by vendor...

CVE-2015-1262

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text...

CVE-2015-1256

CVE-2015-1256 is a use-after-free in Blink’s SVG implementation (shadow tree handling for use elements) affecting Google Chrome prior to 43.0.2357.65. A remote attacker could trigger a denial of service or potentially other impact by a crafted document. Public advisories from multiple vendors con...

CVE-2015-1257

platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service container overflow or...

CVE-2015-1254

CVE-2015-1254 affects Blink (core/dom/Document.cpp) used in Google Chrome before 43.0.2357.65. Root cause: inheritance of the designMode attribute, enabling a Same Origin Policy bypass via editing capabilities. Impact: cross-origin bypass potential in the DOM editing feature. Affected product lin...

CVE-2015-1257

Removed by vendor...

CVE-2015-1253

Removed by vendor...

CVE-2015-1254

Removed by vendor...

UBUNTU-CVE-2015-1256

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element...

FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)

Google Chrome Releases reports : 37 security fixes in this release, including : - 474029 High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous. - 464552 High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous. - 444927 High CVE-2015-1254: Cross-origin bypass in Editing...

UBUNTU-CVE-2015-1257

platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service container overflow or...

UBUNTU-CVE-2015-1254

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2015-1257

platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service container overflow or...

CVE-2015-1253

core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask...