CVE-2015-6774

CVE-2015-6774 is a use-after-free vulnerability in Google Chrome's Extensions implementation, specifically within the GetLoadTimes function. This flaw allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts by manipulating a pointer with crafted JavaScript. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.