CVE-2015-1227

The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which t...

CVE-2015-1223

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change...

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2015-01547)

Google Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in the core/html/HTMLInputElement.cpp file in the DOM implementation of Blink used in versions prior to Google Chrome 41.0.2272.76. A remote attacker can exploit this vulnerability to cause a denia...

CVE-2015-1217

CVE-2015-1217 affects Google Chrome (before 41.0.2272.76) and is tied to the V8 bindings in Blink. The vulnerability arises from the V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp, where listeners are not properly compiled, enabling a remote attack...

CVE-2015-1220: Undefined Security Weakness

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size ...

CVE-2015-1223

CVE-2015-1223 affects Google Chrome (Blink DOM) where use-after-free in core/html/HTMLInputElement.cpp can be triggered by extraneous change events (invalid input or read-only fields) due to issues in initializeTypeInParsing and updateType. The vulnerability is in the Blink DOM implementation use...

Google Chrome Blink Denial of Service Vulnerability (CNVD-2015-01502)

Google Chrome is a popular WEB browser. A security vulnerability in the 'getHiddenProperty' function in the bindings/core/v8/V8EventListenerList.h file in Blink used by Google Chrome can be exploited by a remote attacker to crash the application using specially crafted JavaScript code to crash th...

CVE-2015-1230

Removed by vendor...

CVE-2015-1227

Removed by vendor...

CVE-2015-1217

Removed by vendor...

CVE-2015-1220

Removed by vendor...

CVE-2015-1218

Removed by vendor...

CVE-2015-1228

Removed by vendor...

CVE-2015-1221

Removed by vendor...

CVE-2015-1230: Undefined Security Weakness

The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript cod...

CVE-2015-1227

The CVE-2015-1227 issue affects Google Chrome’s Blink rendering engine (DragImage::create in platform/DragImage.cpp). The root cause is uninitialized memory used for image drawing, as reported for Chrome versions prior to 41.0.2272.76. This memory initialization flaw could allow a remote attacker...

CVE-2015-1221

CVE-2015-1221 is a use-after-free in Blink used by Google Chrome before 41.0.2272.76, caused by incorrect operation ordering between the Web SQL Database thread and Blink’s main thread, related to the shutdown function in web/WebKit.cpp. The vulnerability could allow remote denial of service or o...

CVE-2015-1228: Undefined Security Weakness

The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service...

CVE-2015-1228

CVE-2015-1228 affects Google Chrome (Blink) before 41.0.2272.76. The vulnerability is caused by RenderCounter::updateCounter not forcing a relayout and not initializing memory for a data structure, which can be triggered by a crafted CSS token sequence. The result is a denial of service (applicat...

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2015-01512)

Google Chrome is a web browsing tool developed by Google. A memory misreference vulnerability in the 'V8Window:: V8Window:: V8WindowCustom' function in the bindings/core/v8/custom/V8WindowCustom.cpp file in the V8 bundle for Blink used in versions prior to Google Chrome 41.0.2272.76...