CVE-2015-1243

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.

Affected products

Alt Linux, Blink, Google Chrome, Opera, Red Hat, Ubuntu

Google Chrome

≤ 42.0.2311.87

CVSS 2.0

7.5 HIGH

EPSS

2.3% (82th percentile)

NVD status

Modified

Published

2015-05-01

No exploit for CVE-2015-1243 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.