CVE-2015-1237
HighSummary
Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in Google Chrome before version 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, potentially disrupting web application functionality and affecting service availability.
Recommendation
It is recommended to update Google Chrome to version 42.0.2311.90 or later to mitigate this vulnerability.
Other vulnerabilities in Google Chrome
See all- CVE-2026-110172Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110171Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110170Unknown
A use-after-free exists in Bindings in Google Chrome prior to 155.0.8059.79. A remote attacker could read memory inside the sandbox via a crafted HTML page.
- CVE-2026-110169Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110168Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110167Unknown
Use-after-free in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110166Unknown
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110165Unknown
Use-after-free in Core in Google Chrome on Android prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page. Severity: Critical.
- CVE-2026-110164Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110163Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
Original NVD description (English source)
Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS