CVE-2014-7908

chromium-browser: Integer overflow in media

Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a large atom in (1) MPEG-4 or (2) QuickTime .mov data.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7909

chromium-browser: Uninitialized memory read in Skia

effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7910

chromium-browser: Unspecified security issues

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 7.7% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7923

ICU: regexp engine missing look-behind expression range check

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Canonical Google Icu-project and 3 more

Products

Ubuntu Linux Chrome International Components For Unicode and 7 more

CVE-2014-7924

chromium-browser: use-after-free in IndexedDB

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7925

chromium-browser: use-after-free in WebAudio

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7926

ICU: regexp engine incorrect handling of a zero length quantifier

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Canonical Google Icu-project and 3 more

Products

Ubuntu Linux Chrome International Components For Unicode and 7 more

CVE-2014-7927

chromium-browser: memory corruption in V8

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7928

chromium-browser: memory corruption in V8

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7929

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7930

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7931

chromium-browser: memory corruption in V8

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7932

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7933

chromium-browser: use-after-free in FFmpeg

Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed

Vendors

Ffmpeg Google Redhat

Products

Ffmpeg Chrome Rhel Extras

CVE-2014-7934

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7935

chromium-browser: use-after-free in Speech

Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7936

chromium-browser: use-after-free in Views

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7937

chromium-browser: use-after-free in FFmpeg

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Ffmpeg Google Redhat

Products

Ffmpeg Chrome Rhel Extras

CVE-2014-7938

chromium-browser: memory corruption in Fonts

The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7939

chromium-browser: same-origin-bypass in V8

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Chromium Google Opensuse and 1 more

Products

Chromium Chrome Opensuse and 5 more