Unscored severity · published Oct 8, 2014
CVE-2014-3188
Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute…
–
CVSS
6.8%
EPSS
No
On KEV
Description
Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
through 38.0.2125.7 · source: NVD
CO
Chrome OS · Google
through 38.0.2125.77 · source: NVD
EL
Enterprise Linux Desktop Supplementary · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Supplementary · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Supplementary Eus · Redhat
6.6.z · source: NVD
EL
Enterprise Linux Workstation Supplementary · Redhat
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3188
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3188
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2014/10/stable-channel-update-for-chrome-os.html
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-1626.html
code.google.com
https://code.google.com/p/v8/source/detail?r=24125
crbug.com
https://crbug.com/416449
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability