A vulnerability was discovered that allows cross-origin-bypass in the
HTML parser.
A vulnerability was discovered that allows cross-origin-bypass in the
rendering engine Blink.
An use-after-free flaw was discovered in IPC that may lead to arbitrary
code execution and denial of service.
An out-of-bounds write flaw was discovered in Skia that may lead to
arbitrary code execution and denial of service.
An out-of-bounds read flaw was discovered in WebGL that may lead to
information disclosure and denial of service.
A tap-jacking flaw was discovered that allows the hijacking of tabs to
show arbitrary content.
A Type confusion flaw was discovered in V8 that may lead to arbitrary
code execution and denial of service.
A security policy flaw was discovered that allowes HSTS bypass in
WebSockets that may lead to downgrade attacks and cookie hijacking.
An use-after-free flaw was discovered in PDFium that may lead to
arbitrary code execution and denial of service.
An out-of-bounds read flaw was discovered in the rendering engine Blink
that may leads to information disclosure and denial of service.
A scheme issues flaw was discovered in OpenSearch that is leading to
unspecified issues.
A flaw was discovered that is leading to SafeBrowsing filter bypass.
Various vulnerabilities were discovered by internal audits, fuzzing and
other initiatives.
googlechromereleases.blogspot.fr/2015/04/stable-channel-update_14.html
access.redhat.com/security/cve/CVE-2015-1235
access.redhat.com/security/cve/CVE-2015-1236
access.redhat.com/security/cve/CVE-2015-1237
access.redhat.com/security/cve/CVE-2015-1238
access.redhat.com/security/cve/CVE-2015-1240
access.redhat.com/security/cve/CVE-2015-1241
access.redhat.com/security/cve/CVE-2015-1242
access.redhat.com/security/cve/CVE-2015-1244
access.redhat.com/security/cve/CVE-2015-1245
access.redhat.com/security/cve/CVE-2015-1246
access.redhat.com/security/cve/CVE-2015-1247
access.redhat.com/security/cve/CVE-2015-1248
access.redhat.com/security/cve/CVE-2015-1249