CVE-2015-1230

CVE-2015-1230 describes a type confusion vulnerability in the getHiddenProperty function within Blink, affecting Google Chrome versions prior to 41.0.2272.76, as well as Canonical and Red Hat products. This flaw, stemming from a name conflict with the AudioContext class, allows remote attackers to trigger a denial of service or potentially other unspecified impacts via crafted JavaScript. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.