Google Chrome Releases reports :

29 security fixes in this release, including :

- [516377] High CVE-2015-1291: Cross-origin bypass in DOM. Credit to anonymous.

- [522791] High CVE-2015-1292: Cross-origin bypass in ServiceWorker.
Credit to Mariusz Mlynski.

- [524074] High CVE-2015-1293: Cross-origin bypass in DOM. Credit to Mariusz Mlynski.

- [492263] High CVE-2015-1294: Use-after-free in Skia. Credit to cloudfuzzer.

- [502562] High CVE-2015-1295: Use-after-free in Printing. Credit to anonymous.

- [421332] High CVE-2015-1296: Character spoofing in omnibox. Credit to zcorpan.

- [510802] Medium CVE-2015-1297: Permission scoping error in Webrequest. Credit to Alexander Kashev.

- [518827] Medium CVE-2015-1298: URL validation error in extensions.
Credit to Rob Wu.

- [416362] Medium CVE-2015-1299: Use-after-free in Blink. Credit to taro.suzuki.dev.

- [511616] Medium CVE-2015-1300: Information leak in Blink. Credit to cgvwzq.

- [526825] CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.

The version of Google Chrome installed on the remote Windows host is prior to 4.5.103.29. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_09_stable-channel-update advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1301)

  - Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before     45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other     impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp. (CVE-2015-1299)

  - The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google     Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to     bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with     crafted JavaScript code and IFRAME elements. (CVE-2015-1291)

  - The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in     Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin     Policy by accessing a Service Worker. (CVE-2015-1292)

  - The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to     bypass the Same Origin Policy via unspecified vectors. (CVE-2015-1293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2015-1291     A cross-origin bypass issue was discovered in DOM.

  - CVE-2015-1292     Mariusz Mlynski discovered a cross-origin bypass issue     in ServiceWorker.

  - CVE-2015-1293     Mariusz Mlynski discovered a cross-origin bypass issue     in DOM.

  - CVE-2015-1294     cloudfuzzer discovered a use-after-free issue in the     Skia graphics library.

  - CVE-2015-1295     A use-after-free issue was discovered in the printing     component.

  - CVE-2015-1296     zcorpan discovered a character spoofing issue.

  - CVE-2015-1297     Alexander Kashev discovered a permission scoping error.

  - CVE-2015-1298     Rob Wu discovered an error validating the URL of     extensions.

  - CVE-2015-1299     taro.suzuki.dev discovered a use-after-free issue in the     Blink/WebKit library.

  - CVE-2015-1300     cgvwzq discovered an information disclosure issue in the     Blink/WebKit library.

  - CVE-2015-1301     The chrome 45 development team found and fixed various     issues during internal auditing. Also multiple issues     were fixed in the libv8 library, version 4.5.103.29.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2735-1 advisory.

    It was discovered that the DOM tree could be corrupted during parsing in some circumstances. If a user     were tricked in to opening a specially crafted website, an attacker could potentially exploit this to     bypass same-origin restrictions or cause a denial of service. (CVE-2015-1291)

    An issue was discovered in NavigatorServiceWorker::serviceWorker in Blink. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin     restrictions. (CVE-2015-1292)

    An issue was discovered in the DOM implementation in Blink. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions.
    (CVE-2015-1293)

    A use-after-free was discovered in Skia. If a user were tricked in to opening a specially crafted website,     an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute     arbitrary code with the privileges of the sandboxed render process. (CVE-2015-1294)

    A use-after-free was discovered in the shared-timer implementation in Blink. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process.
    (CVE-2015-1299)

    It was discovered that the availability of iframe Resource Timing API times was not properly restricted in     some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could     potentially exploit this to obtain sensitive information. (CVE-2015-1300)

    Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial     of service via application crash or execute arbitrary code with the privileges of the user invoking the     program. (CVE-2015-1301)

    A heap corruption issue was discovered in oxide::JavaScriptDialogManager. If a user were tricked in to     opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via application crash, or execute arbitrary code with the privileges of the user invoking the     program. (CVE-2015-1332)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1712 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause Chromium to crash or,     potentially, execute arbitrary code with the privileges of the user running     Chromium. (CVE-2015-1291, CVE-2015-1292, CVE-2015-1293, CVE-2015-1294,     CVE-2015-1295, CVE-2015-1296, CVE-2015-1297, CVE-2015-1298, CVE-2015-1299,     CVE-2015-1300, CVE-2015-1301)

    All Chromium users should upgrade to these updated packages, which contain     Chromium version 45.0.2454.85, which corrects these issues. After     installing the update, Chromium must be restarted for the changes to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 45.0.2454.85. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_09_stable-channel-update advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1301)

  - Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before     45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other     impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp. (CVE-2015-1299)

  - The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google     Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to     bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with     crafted JavaScript code and IFRAME elements. (CVE-2015-1291)

  - The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in     Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin     Policy by accessing a Service Worker. (CVE-2015-1292)

  - The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to     bypass the Same Origin Policy via unspecified vectors. (CVE-2015-1293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 45.0.2454.85. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_09_stable-channel-update advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1301)

  - Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before     45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other     impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp. (CVE-2015-1299)

  - The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google     Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to     bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with     crafted JavaScript code and IFRAME elements. (CVE-2015-1291)

  - The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in     Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin     Policy by accessing a Service Worker. (CVE-2015-1292)

  - The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to     bypass the Same Origin Policy via unspecified vectors. (CVE-2015-1293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Chromium was updated to the 45.0.2454.85 of the stable channel to fix multiple security issues.

The following vulnerabilities were fixed :

  - CVE-2015-1291: Cross-origin bypass in DOM

  - CVE-2015-1292: Cross-origin bypass in ServiceWorker

  - CVE-2015-1293: Cross-origin bypass in DOM

  - CVE-2015-1294: Use-after-free in Skia

  - CVE-2015-1295: Use-after-free in Printing

  - CVE-2015-1296: Character spoofing in omnibox

  - CVE-2015-1297: Permission scoping error in WebRequest

  - CVE-2015-1298: URL validation error in extensions

  - CVE-2015-1299: Use-after-free in Blink

  - CVE-2015-1300: Information leak in Blink

  - CVE-2015-1301: Various fixes from internal audits,     fuzzing and other initiatives.

The version of Google Chrome installed on the remote macOS host is prior to 4.5.103.29. It is, therefore, affected by multiple vulnerabilities as referenced in the 2015_09_stable-channel-update advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2015-1301)

  - Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before     45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other     impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp. (CVE-2015-1299)

  - The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google     Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to     bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with     crafted JavaScript code and IFRAME elements. (CVE-2015-1291)

  - The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in     Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin     Policy by accessing a Service Worker. (CVE-2015-1292)

  - The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to     bypass the Same Origin Policy via unspecified vectors. (CVE-2015-1293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
85758	FreeBSD : chromium -- multiple vulnerabilities (a9350df8-5157-11e5-b5c1-e8e0b747a45a)	Nessus	FreeBSD Local Security Checks	9/3/2015	1/6/2021	high
275860	Google Chrome < 4.5.103.29 Multiple Vulnerabilities	Nessus	Windows	11/20/2025	11/24/2025	critical
85770	Debian DSA-3351-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	9/4/2015	1/11/2021	high
85872	Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2735-1)	Nessus	Ubuntu Local Security Checks	9/9/2015	8/28/2024	high
85974	RHEL 6 : chromium-browser (RHSA-2015:1712)	Nessus	Red Hat Local Security Checks	9/17/2015	4/15/2025	high
85743	Google Chrome < 45.0.2454.85 Multiple Vulnerabilities	Nessus	Windows	9/2/2015	11/24/2025	critical
85744	Google Chrome < 45.0.2454.85 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/2/2015	11/24/2025	critical
86056	openSUSE Security Update : Chromium (openSUSE-2015-595)	Nessus	SuSE Local Security Checks	9/22/2015	1/19/2021	high
275866	Google Chrome < 4.5.103.29 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	11/20/2025	11/24/2025	critical

Detections

Analytics

Plugins Search

high

critical

high

high

high

critical

critical

high

critical