Search for vulnerabilities
Vulnerability details: VCID-kxsu-7d8e-akcy
Vulnerability ID VCID-kxsu-7d8e-akcy
Aliases CVE-2015-0827
Summary Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to report an out-of-bounds read and an out-of-bounds write when rendering an improperly formatted SVG graphic. This could potentially allow the attacker to read uninitialized memory. In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2015-0827
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2015-19
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0827.json
https://api.first.org/data/v1/epss?cve=CVE-2015-0827
1195623 https://bugzilla.redhat.com/show_bug.cgi?id=1195623
CVE-2015-0827 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827
mfsa2015-19 https://www.mozilla.org/en-US/security/advisories/mfsa2015-19
RHSA-2015:0265 https://access.redhat.com/errata/RHSA-2015:0265
RHSA-2015:0266 https://access.redhat.com/errata/RHSA-2015:0266
RHSA-2015:0629 https://access.redhat.com/errata/RHSA-2015:0629
RHSA-2015:0642 https://access.redhat.com/errata/RHSA-2015:0642
USN-2505-1 https://usn.ubuntu.com/2505-1/
USN-2506-1 https://usn.ubuntu.com/2506-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.78743
EPSS Score 0.01281
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:57.456716+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-19.md 37.0.0