CVE-2015-1241: Input Validation
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1241?
CVE-2015-1241 is rated as high severity due to its potential to allow remote attackers to perform tapjacking.
How do I fix CVE-2015-1241?
To fix CVE-2015-1241, users should update Google Chrome to version 42.0.2311.90 or later.
What platforms are affected by CVE-2015-1241?
CVE-2015-1241 affects Google Chrome versions before 42.0.2311.90 and various Linux distributions including specific versions of Debian, Ubuntu, openSUSE, and Red Hat.
What is a tapjacking attack as described in CVE-2015-1241?
A tapjacking attack involves tricking users into clicking on invisible or disguised elements on a web page, leading to unintended actions.
Can users still be vulnerable to CVE-2015-1241 if they are on the latest version of Google Chrome?
No, users on the latest version of Google Chrome are not vulnerable to CVE-2015-1241.