CVE-2015-1218: Use After Free
Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1218?
CVE-2015-1218 is rated as critical due to its potential for denial of service and possible exploitation by attackers.
How do I fix CVE-2015-1218?
To fix CVE-2015-1218, update Google Chrome to version 41.0.2272.76 or later.
Which versions of Google Chrome are affected by CVE-2015-1218?
CVE-2015-1218 affects Google Chrome versions prior to 41.0.2272.76.
Can CVE-2015-1218 affect systems running Red Hat Enterprise Linux?
Yes, CVE-2015-1218 can potentially affect Red Hat Enterprise Linux versions 6.0 and 6.6.z.
Are there any known exploits for CVE-2015-1218?
While CVE-2015-1218 has vulnerabilities that can be exploited, details on specific exploits have not been publicly disclosed.