Vulnetix
Try Vulnetix Request Demo
CVE-2015-1263 PUBLISHED

The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.

EPSS 0.69% · 71.6th percentile

Risk Scores

EPSS Score
0.69%
71.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSchromium-browser0, 29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1

Timeline

References

Open in Interactive Console →