Google Chrome < 43.0.2357.130 Multiple Vulnerabilities

The version of Google Chrome on the remote host is prior to 43.0.2357.130 and is affected by the following vulnerabilities :

• A scheme validation error exists in WebUI. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-1266)
• A cross-origin bypass vulnerability exists in Blink due to an unspecified flaw that is triggered when handling the creation context passed through public APIs. A remote attacker can exploit this to bypass the cross-origin policy. (CVE-2015-1267)
• A cross-origin bypass vulnerability exists in Blink due to an unspecified flaw in its V8 bindings. A remote attacker can exploit this to bypass the cross-origin policy. (CVE-2015-1268)
• A normalization bypass vulnerability exists in the HSTS/HPKP preload list. A remote attacker can exploit this to bypass HSTS/HPKP preloads and have a connection use HTTP instead of the expected HTTPS. (CVE-2015-1269)