7.5

CVE-2014-3171: google chrome

CVSS: 7.5v2.0HighModified
AliasesUBUNTU-CVE-2014-3171
Published 27-08-2014Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2014-3171 is a high (CVSS 7.5) vulnerability in google chrome. EPSS estimates a 1.61% chance of exploitation in the next 30 days, higher than 75.5% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v2.0 (NVD)
EPSS score
1.61%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 3
DSA-3039-1OPENSUSE-SU-2024:10171-1OPENSUSE-SU-2024:12948-1USN-2326-1

Timeline

  1. 27-08-2014
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.61%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

0.00 pp

From 1.61% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu2 products
  • chromium-browser< 37.0.2062.94-0ubuntu0.14.04.1~pkg1042
  • oxide-qt< 1.1.2-0ubuntu0.14.04.1
Google1 product
  • chromeEOL≤ 37.0.2062.93 | 37.0.2062.0 | 37.0.2062.1 | 37.0.2062.2 | 37.0.2062.3 | 37.0.2062.4 | 37.0.2062.5 | 37.0.2062.6 | 37.0.2062.7 | 37.0.2062.8 | 37.0.2062.9 | 37.0.2062.10 | 37.0.2062.11 | 37.0.2062.12 | 37.0.2062.13 | 37.0.2062.14 | 37.0.2062.15 | 37.0.2062.16 | 37.0.2062.17 | 37.0.2062.18 | 37.0.2062.19 | 37.0.2062.20 | 37.0.2062.21 | 37.0.2062.22 | 37.0.2062.23 | 37.0.2062.24 | 37.0.2062.25 | 37.0.2062.26 | 37.0.2062.27 | 37.0.2062.28 | 37.0.2062.29 | 37.0.2062.30 | 37.0.2062.31 | 37.0.2062.32 | 37.0.2062.33 | 37.0.2062.34 | 37.0.2062.35 | 37.0.2062.36 | 37.0.2062.37 | 37.0.2062.39 | 37.0.2062.43 | 37.0.2062.44 | 37.0.2062.45 | 37.0.2062.46 | 37.0.2062.47 | 37.0.2062.48 | 37.0.2062.49 | 37.0.2062.50 | 37.0.2062.51 | 37.0.2062.52 | 37.0.2062.53 | 37.0.2062.54 | 37.0.2062.55 | 37.0.2062.56 | 37.0.2062.57 | 37.0.2062.58 | 37.0.2062.59 | 37.0.2062.60 | 37.0.2062.61 | 37.0.2062.62 | 37.0.2062.63 | 37.0.2062.64 | 37.0.2062.65 | 37.0.2062.66 | 37.0.2062.67 | 37.0.2062.68 | 37.0.2062.69 | 37.0.2062.70 | 37.0.2062.71 | 37.0.2062.72 | 37.0.2062.73 | 37.0.2062.74 | 37.0.2062.75 | 37.0.2062.76 | 37.0.2062.77 | 37.0.2062.78 | 37.0.2062.80 | 37.0.2062.81 | 37.0.2062.89 | 37.0.2062.90 | 37.0.2062.91 | 37.0.2062.92

2 vendors · 3 products

References

15 links
Show all 15 references