CVE-2015-1272

CVE-2015-1272 describes a use-after-free vulnerability in Google Chrome's GPU process implementation, affecting versions prior to 44.0.2403.89, as well as Debian, OpenSUSE, and Red Hat distributions. This flaw, stemming from the continued availability of a GPUChannelHost data structure during Blink shutdown, allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and low attack complexity to achieve partial confidentiality, integrity, and availability impacts. While there is no known active exploitation, publicly available exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion and media coverage, indicating a degree of awareness despite its inactive status on the Hot List.