VulnerabilityModified

CVE-2015-1295

HIGH 7.5EPSS 1.57%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.57%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_helper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC messages during preparation for printing, as demonstrated by messages associated with PDF documents in conjunction with messages about printer capabilities.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 1.57% probability · 74th percentile
CISA KEV: Not listed
Affected: google/chrome
Source: chrome-cve-admin@google.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.