Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers…
Priority LOW 36Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Why it matters now
EPSS 0.01811 78th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:* | 14.10 | Vulnerable | Canonical |
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | up to 40.0.2214.85 | Vulnerable | |
| cpe:2.3:a:chromium:chromium:*:*:*:*:*:*:*:* | up to 40.0.2214.94 | Vulnerable | Chromium |
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:* Versions 14.10 Vulnerable ·Canonical
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 40.0.2214.85 Vulnerable ·Google
- cpe:2.3:a:chromium:chromium:*:*:*:*:*:*:*:* Versions up to 40.0.2214.94 Vulnerable ·Chromium
Remediation
Red Hat 1 advisory
- RHSA-2015:0093 Released 2015-01-27 · Red Hat rating Importantchromium-browser security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-40.0.2214.91-1.el6_6
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-40.0.2214.91-1.el6_6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-40.0.2214.91-1.el6_6
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2015:0093 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2015:0093 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2015:0093 |
Timeline
- 2026-10-02 Threatist record created from CVE-2015-1205
- 2026-10-03 Alias added: GHSA-7352-jw4q-788p
References
Other 33
- https://support.apple.com/HT205221
- https://code.google.com/p/chromium/issues/detail?id=429139
- https://code.google.com/p/chromium/issues/detail?id=435514
- https://code.google.com/p/chromium/issues/detail?id=411026
- https://code.google.com/p/chromium/issues/detail?id=443333
- https://code.google.com/p/chromium/issues/detail?id=413530
- https://code.google.com/p/chromium/issues/detail?id=425040
- https://support.apple.com/HT205212
- https://code.google.com/p/chromium/issues/detail?id=443274
- https://code.google.com/p/chromium/issues/detail?id=440913
- https://code.google.com/p/chromium/issues/detail?id=438363
- https://code.google.com/p/chromium/issues/detail?id=437655
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- https://code.google.com/p/chromium/issues/detail?id=432209
- https://code.google.com/p/chromium/issues/detail?id=422765
- https://code.google.com/p/chromium/issues/detail?id=440572
- https://code.google.com/p/chromium/issues/detail?id=428828
- https://code.google.com/p/chromium/issues/detail?id=434723
- https://code.google.com/p/chromium/issues/detail?id=327070
- https://code.google.com/p/chromium/issues/detail?id=446076
- https://code.google.com/p/chromium/issues/detail?id=423899
- https://code.google.com/p/chromium/issues/detail?id=439319
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- https://code.google.com/p/chromium/issues/detail?id=429134
- https://code.google.com/p/chromium/issues/detail?id=431187
- https://code.google.com/p/chromium/issues/detail?id=334448
- https://code.google.com/p/chromium/issues/detail?id=411156
- https://code.google.com/p/chromium/issues/detail?id=435815
- https://code.google.com/p/chromium/issues/detail?id=441834
- https://code.google.com/p/chromium/issues/detail?id=425151
- https://code.google.com/p/chromium/issues/detail?id=410030
- https://code.google.com/p/chromium/issues/detail?id=449894
- https://code.google.com/p/chromium/issues/detail?id=431603
Sources
- CVE-2015-1205 · CVE Program
- CVE-2015-1205 · NVD
- FIRST EPSS
- GHSA-7352-jw4q-788p · GitHub Advisory Database · CC BY 4.0
- CVE-2015-1205 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences