CVE-2015-1300

CVE-2015-1300 describes a vulnerability in Google Chrome, specifically within the Blink rendering engine's FrameFetchContext::updateTimingInfoForIFrameNavigation function. This flaw allows remote attackers to obtain sensitive timing information from IFRAME elements via crafted JavaScript and a history.back call. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is a low-complexity attack that can be executed over the network without authentication, leading to a partial compromise of confidentiality. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. While there's limited community discussion and media coverage, its EPSS score suggests a very low likelihood of exploitation.