| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-1716 | 7.5 |
Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Univ
|
30-10-2018 - 16:27 | 09-04-2014 - 10:56 | |
| CVE-2014-1722 | 7.5 |
Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibl
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1727 | 7.5 |
Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms.
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1720 | 7.5 |
Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified oth
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1725 | 5.0 |
The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of s
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1728 | 7.5 |
Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1724 | 7.5 |
Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service (application hang) or possibly have unspecified other impact via a tex
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1726 | 4.3 |
The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1718 | 7.5 |
Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1723 | 7.5 |
The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via cra
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1717 | 7.5 |
Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1729 | 7.5 |
Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1719 | 7.5 |
Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker_stub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 | |
| CVE-2014-1721 | 7.5 |
Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript
|
07-01-2017 - 02:59 | 09-04-2014 - 10:57 |