CVE-2014-1745: google chrome Resource Management Errors
CVSS: 7.5v2.0HighModified
AliasesUBUNTU-CVE-2014-1745DEBIAN-CVE-2014-1745
Published 21-05-2014Last modified 04-06-2025
Vulnerability summary
CVE-2014-1745 is a high (CVSS 7.5) Resource Management Errors vulnerability in google chrome. EPSS estimates a 1.68% chance of exploitation in the next 30 days, higher than 76.5% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v2.0 (NVD)EPSS score
1.68%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 11 · Related 5Timeline
- 21-05-2014PublishedVulnerability first disclosed.
- 04-06-2025Last modifiedVulnerability information updated.
Description
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 7.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:LSourcesAll 4 agree
- NVDNIST7.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
1.68%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.68% on 18-09-2026
18-09-202618-10-2026
EPSS score1.68%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- webkit2gtk< 2.42.1-1~deb12u1 | < 2.42.0-1
- wpewebkitAll versions (No fix recorded) | < 2.42.0-1
Google1 product
- chromeEOL≤ 35.0.1916.113 | 35.0.1916.0 | 35.0.1916.1 | 35.0.1916.2 | 35.0.1916.3 | 35.0.1916.4 | 35.0.1916.5 | 35.0.1916.6 | 35.0.1916.7 | 35.0.1916.8 | 35.0.1916.9 | 35.0.1916.10 | 35.0.1916.11 | 35.0.1916.13 | 35.0.1916.14 | 35.0.1916.15 | 35.0.1916.17 | 35.0.1916.18 | 35.0.1916.19 | 35.0.1916.20 | 35.0.1916.21 | 35.0.1916.22 | 35.0.1916.23 | 35.0.1916.27 | 35.0.1916.31 | 35.0.1916.32 | 35.0.1916.33 | 35.0.1916.34 | 35.0.1916.35 | 35.0.1916.36 | 35.0.1916.37 | 35.0.1916.38 | 35.0.1916.39 | 35.0.1916.40 | 35.0.1916.41 | 35.0.1916.42 | 35.0.1916.43 | 35.0.1916.44 | 35.0.1916.45 | 35.0.1916.46 | 35.0.1916.47 | 35.0.1916.48 | 35.0.1916.49 | 35.0.1916.51 | 35.0.1916.52 | 35.0.1916.54 | 35.0.1916.56 | 35.0.1916.57 | 35.0.1916.59 | 35.0.1916.61 | 35.0.1916.68 | 35.0.1916.69 | 35.0.1916.71 | 35.0.1916.72 | 35.0.1916.74 | 35.0.1916.77 | 35.0.1916.80 | 35.0.1916.82 | 35.0.1916.84 | 35.0.1916.85 | 35.0.1916.86 | 35.0.1916.88 | 35.0.1916.90 | 35.0.1916.92 | 35.0.1916.93 | 35.0.1916.95 | 35.0.1916.96 | 35.0.1916.98 | 35.0.1916.99 | 35.0.1916.101 | 35.0.1916.103 | 35.0.1916.104 | 35.0.1916.105 | 35.0.1916.106 | 35.0.1916.107 | 35.0.1916.108 | 35.0.1916.109 | 35.0.1916.110 | 35.0.1916.111 | 35.0.1916.112
Ubuntu1 product
- chromium-browser< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
3 vendors · 4 products
References
13 links
www.debian.org/security/2014/dsa-2939Vendor Advisory- security.gentoo.org/glsa/glsa-201408-16.xmlVendor Advisory
- lists.opensuse.org/opensuse-updates/2014-06/msg00023.htmlVendor Advisory
- secunia.com/advisories/59155Third Party Advisory
- secunia.com/advisories/58920Third Party Advisory
- www.securitytracker.com/id/1030270VDB Entry
- www.openwall.com/lists/oss-security/2024/02/05/8Mailing List