Unscored severity · published Apr 19, 2015
CVE-2015-1241
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 42.0.2311.90 · source: NVD
DL
Debian Linux · Debian
8.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
6.6 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
6.6 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
6.6 · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0 · source: NVD
LE
Linux Enterprise · Suse
12.0 · source: NVD
OP
Opensuse · Opensuse
13.1; 13.2 · source: NVD
UL
Ubuntu Linux · Canonical
14.04; 14.10; 15.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1241
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1241
Release Notes
http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
Mitigation
http://lists.opensuse.org/opensuse-updates/2015-04/msg00040.html
Mitigation
http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0816.html
Third Party Advisory
http://ubuntu.com/usn/usn-2570-1
Third Party Advisory
http://www.debian.org/security/2015/dsa-3238
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability