CVE-2014-7910: google chrome

EPSS trend

Probability

7.65%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 7.65% on 18-09-2026

18-09-202618-10-2026

EPSS score

7.65%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

14 found

exploit-databaseremotecgiVerified
GNU Bash - Environment Variable Command Injection (Metasploit)
Maturity: weaponized
exploit-databasecgiVerified
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
Maturity: poc
exploit-databasecgiVerified
IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection
Maturity: poc

Show all 14 exploits

exploit-databaseremotehardwareUnverified
QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)
Maturity: poc
exploit-databaseremotehardwareUnverified
QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
Maturity: poc
exploit-databaseremotelinuxVerified
Bash - 'Shellshock' Environment Variables Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
Maturity: weaponized
exploit-databaseremotelinuxVerified
GNU Bash - 'Shellshock' Environment Variable Command Injection
Maturity: weaponized
exploit-databaseremotelinuxUnverified
GNU bash 4.3.11 - Environment Variable dhclient
Maturity: poc
exploit-databaseremotelinuxUnverified
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Maturity: poc
exploit-databaseremotelinuxVerified
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
Maturity: weaponized
exploit-databasemultipleUnverified
Kemp Load Master 7.1.16 - Multiple Vulnerabilities
Maturity: poc
exploit-databasephpUnverified
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
Maturity: poc

References

41 links

code.google.com/p/chromium/issues/detail?id=397396X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=411165X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=409508X Refsource CONFIRM
www.securitytracker.com/id/1031241VDB EntryX Refsource SECTRACK
code.google.com/p/chromium/issues/detail?id=409454X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=391001X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=413744X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=340387X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=421981X Refsource CONFIRM
www.securityfocus.com/bid/71161VDB EntryX Refsource BID

Show all 41 references

code.google.com/p/chromium/issues/detail?id=408426X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=421720X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=423030X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2014-1894.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/62608Third Party AdvisoryX Refsource SECUNIA
code.google.com/p/chromium/issues/detail?id=421090X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=414134X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=389451X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=417329X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=424999X Refsource CONFIRM
www.exploit-db.com/exploits/34879/ExploitX Refsource EXPLOIT DB
secunia.com/advisories/60194Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/98798VDB EntryX Refsource XF
code.google.com/p/chromium/issues/detail?id=425152X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=415407X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=411162X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=424215X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=417210X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=337071X Refsource CONFIRM
googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.htmlX Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=433500X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=421321X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=422482X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=411159X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=413743X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=421504X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=425151X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=423891X Refsource CONFIRM
ubuntu.com/security/CVE-2014-7910REPORT
ubuntu.com/security/notices/USN-2410-1Advisory
www.cve.org/CVERecord?id=CVE-2014-7910REPORT

Related vulnerabilities

CVE-2024-3175debianchromium+10.23%2y ago16-07-2024 22:14Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Low)CVE-2024-3174debianchromium+10.37%2y ago16-07-2024 22:14Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)CVE-2024-3173debianchromium+10.18%2y ago16-07-2024 22:14Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)CVE-2024-3176debianchromium+10.35%2y ago16-07-2024 22:30Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)CVE-2023-2935debianchromium+123.86%3y ago30-05-2023 21:31Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)CVE-2023-2312debianchromium+10.85%3y ago15-08-2023 17:07Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

All vulnerabilities inchrome

CVE-2014-7910: google chrome

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References