Unscored severity · published Jan 22, 2015
CVE-2014-7926
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
through 40.0.2214.85 · source: NVD
CM
Communications Messaging Server · Oracle
7.0.5; 8.0 · source: NVD
EL
Enterprise Linux Desktop Supplementary · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Supplementary · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Supplementary Eus · Redhat
6.6.z · source: NVD
EL
Enterprise Linux Workstation Supplementary · Redhat
6.0 · source: NVD
IC
International Components For Unicode · Icu-project
before 55.1 · source: NVD
OP
Opensuse · Opensuse
13.1; 13.2 · source: NVD
UL
Ubuntu Linux · Canonical
14.04; 14.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7926
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7926
advisories.mageia.org
http://advisories.mageia.org/MGASA-2015-0047.html
bugs.icu-project.org
http://bugs.icu-project.org/trac/ticket/11369
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2015/01/stable-update.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-0093.html
secunia.com
http://secunia.com/advisories/62383
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability