# CVEs published 2015-04-19

17 CVEs were published on April 19, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1235](https://cve.now/CVE-2015-1235.md): The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42. (no CVSS)
- [CVE-2015-1236](https://cve.now/CVE-2015-1236.md): The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in (no CVSS)
- [CVE-2015-1237](https://cve.now/CVE-2015-1237.md): Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render\_frame\_impl.cc in Google Chrome be (no CVSS)
- [CVE-2015-1238](https://cve.now/CVE-2015-1238.md): Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly h (no CVSS)
- [CVE-2015-1240](https://cve.now/CVE-2015-1240.md): gpu/blink/webgraphicscontext3d\_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a d (no CVSS)
- [CVE-2015-1241](https://cve.now/CVE-2015-1241.md): Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gestur (no CVSS)
- [CVE-2015-1242](https://cve.now/CVE-2015-1242.md): The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42. (no CVSS)
- [CVE-2015-1244](https://cve.now/CVE-2015-1244.md): The URLRequest::GetHSTSRedirect function in url\_request/url\_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme w (no CVSS)
- [CVE-2015-1245](https://cve.now/CVE-2015-1245.md): Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location\_bar/open\_pdf\_in\_reader\_view.cc in Goog (no CVSS)
- [CVE-2015-1246](https://cve.now/CVE-2015-1246.md): Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifi (no CVSS)
- [CVE-2015-1247](https://cve.now/CVE-2015-1247.md): The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search\_engines/search\_engine\_tab\_helper.cc in Google Chrome before 42.0.2311 (no CVSS)
- [CVE-2015-1248](https://cve.now/CVE-2015-1248.md): The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection m (no CVSS)
- [CVE-2015-1249](https://cve.now/CVE-2015-1249.md): Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2015-3333](https://cve.now/CVE-2015-3333.md): Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a (no CVSS)
- [CVE-2015-3334](https://cve.now/CVE-2015-3334.md): browser/ui/website\_settings/website\_settings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Pe (no CVSS)
- [CVE-2015-3335](https://cve.now/CVE-2015-3335.md): The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox\_linux/nacl\_sandbox\_linux.cc in Google Chrome before 42 (no CVSS)
- [CVE-2015-3336](https://cve.now/CVE-2015-3336.md): Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT\_SETTINGS\_TYPE\_FULLSCREEN and CONTENT\_SETTINGS\_ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.