CVE-2015-1276

Critical

Published: 23/07/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the IndexedDB implementation in Google Chrome before version 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting the availability of web applications using IndexedDB.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.