CVE-2015-1261 describes a URL spoofing vulnerability in Google Chrome for Android, specifically affecting versions prior to 43.0.2357.65. This flaw, residing in the WebsiteSettingsPopup.java component, allows attackers to manipulate a URL's fragment identifier to display misleading information in the URL bar or page-info popups. Rated with a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), it is a low-severity issue with potential for information spoofing but no direct impact on confidentiality, integrity, or availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
<= 42.0.2311.107CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:android:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.