CVE-2014-7940: google chrome Resource Management Errors

EPSS trend

Probability

2.07%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.07% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

23 links

secunia.com/advisories/62665Third Party AdvisoryX Refsource SECUNIA
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlX Refsource CONFIRM
chromium.googlesource.com/chromium/src.git/+/87feb77547781a22b31c423bc0d57b7dca32d5b8X Refsource CONFIRMREPORT
googlechromereleases.blogspot.com/2015/01/stable-update.htmlX Refsource CONFIRMREPORT
secunia.com/advisories/62575Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2476-1Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/bid/72288VDB EntryX Refsource BID
security.gentoo.org/glsa/glsa-201502-13.xmlVendor AdvisoryX Refsource GENTOO
www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlX Refsource CONFIRM
security.gentoo.org/glsa/201503-06Vendor AdvisoryX Refsource GENTOO

Show all 23 references

www.securitytracker.com/id/1031623VDB EntryX Refsource SECTRACK
chromium.googlesource.com/chromium/deps/icu/+/866ff696e9022a6000afbab516fba62cfa306075X Refsource CONFIRMREPORT
code.google.com/p/chromium/issues/detail?id=433866X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.htmlVendor AdvisoryX Refsource SUSE
advisories.mageia.org/MGASA-2015-0047.htmlX Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2015-0093.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/62383Third Party AdvisoryX Refsource SECUNIA
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlX Refsource MISC
ubuntu.com/security/CVE-2014-7940REPORT
ubuntu.com/security/notices/USN-2476-1Advisory
ubuntu.com/security/notices/USN-2522-1Advisory
www.cve.org/CVERecord?id=CVE-2014-7940REPORT
security-tracker.debian.org/tracker/CVE-2014-7940Advisory

Related vulnerabilities

CVE-2018-18928debianicu+22.90%7y ago04-11-2018 20:00International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.CVE-2015-5922applemac_os_x+22.96%11y ago09-10-2015 01:00Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.CVE-2007-4771debianicu+12.54%18y ago28-01-2008 23:00Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack. NOTE: some of these details are obtained from third party information.CVE-2007-4770debianicu+12.93%18y ago28-01-2008 23:00libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.CVE-2016-7415alpineicu+35.80%10y ago17-09-2016 21:00Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.CVE-2016-6293alpineicu+45.02%10y ago25-07-2016 14:00The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.

All vulnerabilities inchrome international_components_for_unicode

CVE-2014-7940: google chrome Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References