CVE-2015-1275: XSS
Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka "Universal XSS (UXSS)."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1275?
CVE-2015-1275 is classified as a high severity cross-site scripting (XSS) vulnerability.
How does CVE-2015-1275 affect Google Chrome?
CVE-2015-1275 allows remote attackers to inject arbitrary web scripts or HTML into vulnerable versions of Google Chrome before 44.0.2403.89.
How do I fix CVE-2015-1275?
To fix CVE-2015-1275, users should update to the latest version of Google Chrome beyond 44.0.2403.89.
Which versions of Google Chrome are affected by CVE-2015-1275?
CVE-2015-1275 affects all versions of Google Chrome from the initial release up to and including 43.0.2357.134.
Are there any specific operating systems that are vulnerable to CVE-2015-1275?
CVE-2015-1275 primarily affects the Google Chrome browser on Android and certain versions of openSUSE.