6.4

CVE-2014-3172: google chrome

CVSS: 6.4v2.0MediumModified
AliasesUBUNTU-CVE-2014-3172
Published 27-08-2014Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2014-3172 is a medium (CVSS 6.4) vulnerability in google chrome. EPSS estimates a 1.85% chance of exploitation in the next 30 days, higher than 78.7% of scored vulnerabilities.

Overall risk
26/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.4/10
010
Medium · v2.0 (NVD)
EPSS score
1.85%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 2
DSA-3039-1OPENSUSE-SU-2024:10171-1OPENSUSE-SU-2024:12948-1

Timeline

  1. 27-08-2014
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.85%

Chance of exploitation in the next 30 days

Percentile

79%

Versus all other CVEs

30-day change

0.00 pp

From 1.85% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Google1 product
  • chromeEOL≤ 37.0.2062.93 | 37.0.2062.0 | 37.0.2062.1 | 37.0.2062.2 | 37.0.2062.3 | 37.0.2062.4 | 37.0.2062.5 | 37.0.2062.6 | 37.0.2062.7 | 37.0.2062.8 | 37.0.2062.9 | 37.0.2062.10 | 37.0.2062.11 | 37.0.2062.12 | 37.0.2062.13 | 37.0.2062.14 | 37.0.2062.15 | 37.0.2062.16 | 37.0.2062.17 | 37.0.2062.18 | 37.0.2062.19 | 37.0.2062.20 | 37.0.2062.21 | 37.0.2062.22 | 37.0.2062.23 | 37.0.2062.24 | 37.0.2062.25 | 37.0.2062.26 | 37.0.2062.27 | 37.0.2062.28 | 37.0.2062.29 | 37.0.2062.30 | 37.0.2062.31 | 37.0.2062.32 | 37.0.2062.33 | 37.0.2062.34 | 37.0.2062.35 | 37.0.2062.36 | 37.0.2062.37 | 37.0.2062.39 | 37.0.2062.43 | 37.0.2062.44 | 37.0.2062.45 | 37.0.2062.46 | 37.0.2062.47 | 37.0.2062.48 | 37.0.2062.49 | 37.0.2062.50 | 37.0.2062.51 | 37.0.2062.52 | 37.0.2062.53 | 37.0.2062.54 | 37.0.2062.55 | 37.0.2062.56 | 37.0.2062.57 | 37.0.2062.58 | 37.0.2062.59 | 37.0.2062.60 | 37.0.2062.61 | 37.0.2062.62 | 37.0.2062.63 | 37.0.2062.64 | 37.0.2062.65 | 37.0.2062.66 | 37.0.2062.67 | 37.0.2062.68 | 37.0.2062.69 | 37.0.2062.70 | 37.0.2062.71 | 37.0.2062.72 | 37.0.2062.73 | 37.0.2062.74 | 37.0.2062.75 | 37.0.2062.76 | 37.0.2062.77 | 37.0.2062.78 | 37.0.2062.80 | 37.0.2062.81 | 37.0.2062.89 | 37.0.2062.90 | 37.0.2062.91 | 37.0.2062.92
Ubuntu1 product
  • chromium-browser< 37.0.2062.94-0ubuntu0.14.04.1~pkg1042

2 vendors · 2 products

References

13 links
Show all 13 references