CVE-2015-1228

CVE-2015-1228 is a denial-of-service vulnerability in the RenderCounter::updateCounter function within Blink, affecting Google Chrome versions prior to 41.0.2272.76, as well as products from Canonical and Red Hat. This flaw allows remote attackers to trigger an application crash, and potentially other impacts, through a specially crafted CSS token sequence that prevents proper memory initialization. With a CVSS score of 7.5, it is considered high severity due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received some community discussion and media coverage.