CVE-2015-1218

CVE-2015-1218 describes multiple use-after-free vulnerabilities within the DOM implementation of Blink, affecting Google Chrome versions prior to 41.0.2272.76. These flaws, specifically in HTMLScriptElement::didMoveToNewDocument and SVGScriptElement::didMoveToNewDocument, can be triggered by moving SCRIPT elements between documents. The vulnerability carries a CVSS score of 7.5, indicating a high severity with a network-based attack vector, low complexity, and potential for denial of service or other unspecified impacts, including information disclosure and integrity compromise. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, the vulnerability received some community discussion and media coverage at the time of its disclosure.