Unscored severity · published Mar 16, 2014
CVE-2014-1708
The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Chrome OS · Google
through 33.0.1750.149; 33.0.1750.2; 33.0.1750.5; 33.0.1750.16; 33.0.1750.29; 33.0.1750.51; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-1708
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-1708
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
code.google.com
https://code.google.com/p/chromium/issues/detail?id=344051
More from Chrome OS
9.8
CVE-2025-6179
Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode,…
9.8
CVE-2016-5179
Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot
9.1
CVE-2014-3180
In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read
8.8
CVE-2025-2073
Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read,…
8.8
CVE-2025-1568
Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code…