CVE-2015-2239
google chrome: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.
Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveraging (1) a compromised search engine or (2) an XSS vulnerability in a search engine, a different vulnerability than CVE-2015-1231.
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-19
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:chrome
References
- http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
- http://www.securityfocus.com/bid/74855
- https://code.google.com/p/chromium/issues/detail?id=256724
- https://code.google.com/p/chromium/issues/detail?id=463349
- http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html