CVE-2015-1250
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to...
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Record
CVE-2015-1250- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Record
CVE-2015-1250- Updated
- 2026-11-02
EUVDEUVD-2015-1391 No score
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Record
EUVD-2015-1391- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hh5c-mmwf-hc79 No score
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to...
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Record
GHSA-hh5c-mmwf-hc79- Updated
- 2026-11-02
OSVMGASA-2015-0182 No score
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 42.0.2311.135 fixes security issues: a use-after-free in DOM (CVE-2015-1243), and various fixes from internal audits, fuzzing and other initiatives (CVE-2015-1250).
- Record
MGASA-2015-0182- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-1250 No score
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Record
UBUNTU-CVE-2015-1250- Updated
- 2026-11-02
OSVUSN-2582-1 No score
oxide-qt vulnerabilities
A use-after-free was discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. (CVE-2015-1243)
Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking the program. (CVE-2015-1250)
- Record
USN-2582-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:8 From an advisory covering 2 CVEs |
before 42.0.2311.135-1~deb8u1, plus listed versions 41.0.2272.118-142.0.2311.90-142.0.2311.90-1~deb8u142.0.2311.90-2 |
42.0.2311.135-1~deb8u1 |
chromium-browser-stableMageia:4 From an advisory covering 2 CVEs |
before 42.0.2311.135-1.mga4 | 42.0.2311.135-1.mga4 |
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:42.0.2311.135-1.el6_6 | 0:42.0.2311.135-1.el6_6 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:42.0.2311.135-1.el6_6 | 0:42.0.2311.135-1.el6_6 |
chromium-browserUbuntu:14.04:LTS |
before 43.0.2357.81-0ubuntu0.14.04.1.1089, plus listed versions 29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2 Show 8 moreShow less36.0.1985.125-0ubuntu1.14.04.0~pkg102937.0.2062.94-0ubuntu0.14.04.1~pkg104237.0.2062.120-0ubuntu0.14.04.1~pkg104938.0.2125.111-0ubuntu0.14.04.1.106139.0.2171.65-0ubuntu0.14.04.1.106440.0.2214.94-0ubuntu0.14.04.1.106840.0.2214.111-0ubuntu0.14.04.1.106941.0.2272.76-0ubuntu0.14.04.1.1076 |
43.0.2357.81-0ubuntu0.14.04.1.1089 |
oxide-qtUbuntu:14.04:LTS |
before 1.6.6-0ubuntu0.14.04.1, plus listed versions 1.0.0~bzr437-0ubuntu11.0.0~bzr452-0ubuntu11.0.0~bzr475-0ubuntu11.0.0~bzr490-0ubuntu11.0.0~bzr501-0ubuntu1 Show 11 moreShow less1.0.0~bzr501-0ubuntu21.0.4-0ubuntu0.14.04.11.0.5-0ubuntu0.14.04.11.1.2-0ubuntu0.14.04.11.2.5-0ubuntu0.14.04.11.3.4-0ubuntu0.14.04.11.4.2-0ubuntu0.14.04.11.4.3-0ubuntu0.14.04.11.5.5-0ubuntu0.14.04.31.5.6-0ubuntu0.14.04.21.6.5-0ubuntu0.14.04.1 |
1.6.6-0ubuntu0.14.04.1 |
oxide-qtUbuntu:14.04:LTS From an advisory covering 2 CVEs |
before 1.6.6-0ubuntu0.14.04.1, plus listed versions 1.0.0~bzr437-0ubuntu11.0.0~bzr452-0ubuntu11.0.0~bzr475-0ubuntu11.0.0~bzr490-0ubuntu11.0.0~bzr501-0ubuntu1 Show 11 moreShow less1.0.0~bzr501-0ubuntu21.0.4-0ubuntu0.14.04.11.0.5-0ubuntu0.14.04.11.1.2-0ubuntu0.14.04.11.2.5-0ubuntu0.14.04.11.3.4-0ubuntu0.14.04.11.4.2-0ubuntu0.14.04.11.4.3-0ubuntu0.14.04.11.5.5-0ubuntu0.14.04.31.5.6-0ubuntu0.14.04.21.6.5-0ubuntu0.14.04.1 |
1.6.6-0ubuntu0.14.04.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-1250 is a high vulnerability (CVSS 7.5) in Google Chrome, published April 30, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in chromium-browser 43.0.2357.81-0ubuntu0.14.04.1.1089.
References
code.google.com/p/chromium/issues/detail?id=453553
lists.opensuse.org/opensuse-updates/2015-05/msg00009.html
ubuntu.com/usn/USN-2582-1
securitytracker.com/id/1032234
Show 194 moreShow less
debian.org/security/2015/dsa-3242
security.gentoo.org/glsa/201506-04
rhn.redhat.com/errata/RHSA-2015-0921.html
securityfocus.com/bid/74389
googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.html
nvd.nist.gov/vuln/detail/CVE-2015-1250
github.com/advisories/GHSA-hh5c-mmwf-hc79
advisories.mageia.org/MGASA-2015-0182.html
bugs.mageia.org/show_bug.cgi?id=15795
access.redhat.com/errata/RHSA-2015:0921
bugzilla.redhat.com/show_bug.cgi?id=1216920
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0921.json
cve.org/CVERecord?id=CVE-2015-1243
ubuntu.com/security/CVE-2015-1250
suse.com/security/cve/CVE-2011-3015
Left out here: 2,163 references. The JSON record has them.