CVE-2015-1241: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 14.10 only; version 15.04 only
• Debian Debian Linux: version 8.0 only
• Google Chrome: before 42.0.2311.90 (fixed in 42.0.2311.90)
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Eus: version 6.6 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Server Aus: version 6.6 only
• Red Hat Enterprise Linux Server Eus: version 6.6 only
• Red Hat Enterprise Linux Workstation: version 6.0 only
• Suse Linux Enterprise: version 12.0 only

Published 2015-04-19. Last modified 2026-06-17.