CVE-2015-6792: google chrome
Vulnerability summary
CVE-2015-6792 is a high (CVSS 10.0) vulnerability in google chrome. EPSS estimates a 3.96% chance of exploitation in the next 30 days, higher than 90.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 24-12-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
3.96%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.96% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Google1 product
- chrome≤ 47.0.2526.80
Mageia1 product
- chromium-browser-stable< 47.0.2526.106-1.mga5
Ubuntu1 product
- chromium-browser< 47.0.2526.106-0ubuntu0.14.04.1.1107
3 vendors · 3 products
References
17 links- codereview.chromium.org/1508563003X Refsource CONFIRM
- codereview.chromium.org/1500153002X Refsource CONFIRM
- code.google.com/p/chromium/issues/detail?id=569486X Refsource CONFIRM
- code.google.com/p/chromium/issues/detail?id=564501X Refsource CONFIRM
