CVE-2015-1286: XSS
Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8contextnativehandler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context restriction, aka a Blink "Universal XSS (UXSS)."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1286?
CVE-2015-1286 has a medium severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-1286?
To fix CVE-2015-1286, update Google Chrome to version 44.0.2403.89 or later.
Which versions of Google Chrome are affected by CVE-2015-1286?
Google Chrome versions prior to 44.0.2403.89 are affected by CVE-2015-1286.
What types of attacks can exploit CVE-2015-1286?
CVE-2015-1286 can be exploited to execute arbitrary web scripts or HTML through cross-site scripting.
What should I do if I am using an affected OS for CVE-2015-1286?
If using an affected OS, ensure that your browser is updated to the latest version to mitigate CVE-2015-1286.