CVE-2015-1259

highpriority · track · 30EPSS 0.014 · 72 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.40% (72nd) EPSS

CVSS 7.5 · high

Is it mine?

16 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedchromium-browser-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023
Fixedchromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1023

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–7.5

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Psecondary · FSTEC (BDU) RU

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:P/A:P/E:Usecondary · CVSS-BT (t0sche)

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:P/A:Nsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-17USprimaryCWE-416USCWE-456US

affected products (16)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Google Inc Google Chrome≤ 43.0.2357.65fstec_bduRU
debian debian linux= 8.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
google chrome≤ 42.0.2311.152nvdUScpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
chromium-browser-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)all versionsfixedredhat_csafUS
chromium-browser-debuginfo-0:43.0.2357.65-1.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)all versionsfixedredhat_csafUS

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2015:1023Red Hat Security Advisory: chromium-browser security update2015-05-25csaf · redhat_csafUS
Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

published 2015-05-20modified 2026-06-17

related (812)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-41125US	—OT critical	3.05% (87th)	KEV	2022-11-09
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-21445US	high7.5OT critical	62.5% (99th)	KEV	2022-04-19
Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0…
CVE-2022-26258US	critical9.8OT critical	91.6% (100th)	KEV	2022-03-28
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
CVE-2017-8543US	critical9.8OT critical	74.4% (99th)	KEV	2017-06-15
Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1,…
CVE-2017-8464US	high8.8OT critical	90.0% (100th)	KEV	2017-06-15
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,…

+807 more

references (18)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan