Read the docs
TI-2014-01356 Aliases CVE-2014-1745GHSA-pr96-m2pj-3g36

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome…

Priority LOW 35CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · Low
Fix status
Partial Red Hat: 4 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01681 77th percentileScored 2026-11-07
Fix Partial Red Hat: 3 advisoriesRed Hat: 4 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 80

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 35.0.1916.113VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.0:*:*:*:*:*:*:*35.0.1916.0VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.1:*:*:*:*:*:*:*35.0.1916.1VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.2:*:*:*:*:*:*:*35.0.1916.2VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.3:*:*:*:*:*:*:*35.0.1916.3VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.4:*:*:*:*:*:*:*35.0.1916.4VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.5:*:*:*:*:*:*:*35.0.1916.5VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.6:*:*:*:*:*:*:*35.0.1916.6VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.7:*:*:*:*:*:*:*35.0.1916.7VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.8:*:*:*:*:*:*:*35.0.1916.8VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 35.0.1916.113 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.0:*:*:*:*:*:*:* Versions 35.0.1916.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.1:*:*:*:*:*:*:* Versions 35.0.1916.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.2:*:*:*:*:*:*:* Versions 35.0.1916.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.3:*:*:*:*:*:*:* Versions 35.0.1916.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.4:*:*:*:*:*:*:* Versions 35.0.1916.4 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.5:*:*:*:*:*:*:* Versions 35.0.1916.5 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.6:*:*:*:*:*:*:* Versions 35.0.1916.6 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.7:*:*:*:*:*:*:* Versions 35.0.1916.7 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.8:*:*:*:*:*:*:* Versions 35.0.1916.8 Vulnerable ·Google
Show 70 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:35.0.1916.9:*:*:*:*:*:*:*35.0.1916.9VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.10:*:*:*:*:*:*:*35.0.1916.10VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.11:*:*:*:*:*:*:*35.0.1916.11VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.13:*:*:*:*:*:*:*35.0.1916.13VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.14:*:*:*:*:*:*:*35.0.1916.14VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.15:*:*:*:*:*:*:*35.0.1916.15VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.17:*:*:*:*:*:*:*35.0.1916.17VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.18:*:*:*:*:*:*:*35.0.1916.18VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.19:*:*:*:*:*:*:*35.0.1916.19VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.20:*:*:*:*:*:*:*35.0.1916.20VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.21:*:*:*:*:*:*:*35.0.1916.21VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.22:*:*:*:*:*:*:*35.0.1916.22VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.23:*:*:*:*:*:*:*35.0.1916.23VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.27:*:*:*:*:*:*:*35.0.1916.27VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.31:*:*:*:*:*:*:*35.0.1916.31VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.32:*:*:*:*:*:*:*35.0.1916.32VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.33:*:*:*:*:*:*:*35.0.1916.33VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.34:*:*:*:*:*:*:*35.0.1916.34VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.35:*:*:*:*:*:*:*35.0.1916.35VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.36:*:*:*:*:*:*:*35.0.1916.36VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.37:*:*:*:*:*:*:*35.0.1916.37VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.38:*:*:*:*:*:*:*35.0.1916.38VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.39:*:*:*:*:*:*:*35.0.1916.39VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.40:*:*:*:*:*:*:*35.0.1916.40VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.41:*:*:*:*:*:*:*35.0.1916.41VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.42:*:*:*:*:*:*:*35.0.1916.42VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.43:*:*:*:*:*:*:*35.0.1916.43VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.44:*:*:*:*:*:*:*35.0.1916.44VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.45:*:*:*:*:*:*:*35.0.1916.45VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.46:*:*:*:*:*:*:*35.0.1916.46VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.47:*:*:*:*:*:*:*35.0.1916.47VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.48:*:*:*:*:*:*:*35.0.1916.48VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.49:*:*:*:*:*:*:*35.0.1916.49VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.51:*:*:*:*:*:*:*35.0.1916.51VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.52:*:*:*:*:*:*:*35.0.1916.52VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.54:*:*:*:*:*:*:*35.0.1916.54VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.56:*:*:*:*:*:*:*35.0.1916.56VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.57:*:*:*:*:*:*:*35.0.1916.57VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.59:*:*:*:*:*:*:*35.0.1916.59VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.61:*:*:*:*:*:*:*35.0.1916.61VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.68:*:*:*:*:*:*:*35.0.1916.68VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.69:*:*:*:*:*:*:*35.0.1916.69VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.71:*:*:*:*:*:*:*35.0.1916.71VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.72:*:*:*:*:*:*:*35.0.1916.72VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.74:*:*:*:*:*:*:*35.0.1916.74VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.77:*:*:*:*:*:*:*35.0.1916.77VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.80:*:*:*:*:*:*:*35.0.1916.80VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.82:*:*:*:*:*:*:*35.0.1916.82VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.84:*:*:*:*:*:*:*35.0.1916.84VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.85:*:*:*:*:*:*:*35.0.1916.85VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.86:*:*:*:*:*:*:*35.0.1916.86VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.88:*:*:*:*:*:*:*35.0.1916.88VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.90:*:*:*:*:*:*:*35.0.1916.90VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.92:*:*:*:*:*:*:*35.0.1916.92VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.93:*:*:*:*:*:*:*35.0.1916.93VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.95:*:*:*:*:*:*:*35.0.1916.95VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.96:*:*:*:*:*:*:*35.0.1916.96VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.98:*:*:*:*:*:*:*35.0.1916.98VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.99:*:*:*:*:*:*:*35.0.1916.99VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.101:*:*:*:*:*:*:*35.0.1916.101VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.103:*:*:*:*:*:*:*35.0.1916.103VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.104:*:*:*:*:*:*:*35.0.1916.104VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.105:*:*:*:*:*:*:*35.0.1916.105VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.106:*:*:*:*:*:*:*35.0.1916.106VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.107:*:*:*:*:*:*:*35.0.1916.107VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.108:*:*:*:*:*:*:*35.0.1916.108VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.109:*:*:*:*:*:*:*35.0.1916.109VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.110:*:*:*:*:*:*:*35.0.1916.110VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.111:*:*:*:*:*:*:*35.0.1916.111VulnerableGoogle
cpe:2.3:a:google:chrome:35.0.1916.112:*:*:*:*:*:*:*35.0.1916.112VulnerableGoogle
  • cpe:2.3:a:google:chrome:35.0.1916.9:*:*:*:*:*:*:* Versions 35.0.1916.9 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.10:*:*:*:*:*:*:* Versions 35.0.1916.10 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.11:*:*:*:*:*:*:* Versions 35.0.1916.11 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.13:*:*:*:*:*:*:* Versions 35.0.1916.13 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.14:*:*:*:*:*:*:* Versions 35.0.1916.14 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.15:*:*:*:*:*:*:* Versions 35.0.1916.15 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.17:*:*:*:*:*:*:* Versions 35.0.1916.17 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.18:*:*:*:*:*:*:* Versions 35.0.1916.18 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.19:*:*:*:*:*:*:* Versions 35.0.1916.19 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.20:*:*:*:*:*:*:* Versions 35.0.1916.20 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.21:*:*:*:*:*:*:* Versions 35.0.1916.21 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.22:*:*:*:*:*:*:* Versions 35.0.1916.22 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.23:*:*:*:*:*:*:* Versions 35.0.1916.23 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.27:*:*:*:*:*:*:* Versions 35.0.1916.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.31:*:*:*:*:*:*:* Versions 35.0.1916.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.32:*:*:*:*:*:*:* Versions 35.0.1916.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.33:*:*:*:*:*:*:* Versions 35.0.1916.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.34:*:*:*:*:*:*:* Versions 35.0.1916.34 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.35:*:*:*:*:*:*:* Versions 35.0.1916.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.36:*:*:*:*:*:*:* Versions 35.0.1916.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.37:*:*:*:*:*:*:* Versions 35.0.1916.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.38:*:*:*:*:*:*:* Versions 35.0.1916.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.39:*:*:*:*:*:*:* Versions 35.0.1916.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.40:*:*:*:*:*:*:* Versions 35.0.1916.40 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.41:*:*:*:*:*:*:* Versions 35.0.1916.41 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.42:*:*:*:*:*:*:* Versions 35.0.1916.42 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.43:*:*:*:*:*:*:* Versions 35.0.1916.43 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.44:*:*:*:*:*:*:* Versions 35.0.1916.44 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.45:*:*:*:*:*:*:* Versions 35.0.1916.45 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.46:*:*:*:*:*:*:* Versions 35.0.1916.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.47:*:*:*:*:*:*:* Versions 35.0.1916.47 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.48:*:*:*:*:*:*:* Versions 35.0.1916.48 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.49:*:*:*:*:*:*:* Versions 35.0.1916.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.51:*:*:*:*:*:*:* Versions 35.0.1916.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.52:*:*:*:*:*:*:* Versions 35.0.1916.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.54:*:*:*:*:*:*:* Versions 35.0.1916.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.56:*:*:*:*:*:*:* Versions 35.0.1916.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.57:*:*:*:*:*:*:* Versions 35.0.1916.57 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.59:*:*:*:*:*:*:* Versions 35.0.1916.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.61:*:*:*:*:*:*:* Versions 35.0.1916.61 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.68:*:*:*:*:*:*:* Versions 35.0.1916.68 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.69:*:*:*:*:*:*:* Versions 35.0.1916.69 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.71:*:*:*:*:*:*:* Versions 35.0.1916.71 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.72:*:*:*:*:*:*:* Versions 35.0.1916.72 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.74:*:*:*:*:*:*:* Versions 35.0.1916.74 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.77:*:*:*:*:*:*:* Versions 35.0.1916.77 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.80:*:*:*:*:*:*:* Versions 35.0.1916.80 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.82:*:*:*:*:*:*:* Versions 35.0.1916.82 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.84:*:*:*:*:*:*:* Versions 35.0.1916.84 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.85:*:*:*:*:*:*:* Versions 35.0.1916.85 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.86:*:*:*:*:*:*:* Versions 35.0.1916.86 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.88:*:*:*:*:*:*:* Versions 35.0.1916.88 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.90:*:*:*:*:*:*:* Versions 35.0.1916.90 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.92:*:*:*:*:*:*:* Versions 35.0.1916.92 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.93:*:*:*:*:*:*:* Versions 35.0.1916.93 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.95:*:*:*:*:*:*:* Versions 35.0.1916.95 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.96:*:*:*:*:*:*:* Versions 35.0.1916.96 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.98:*:*:*:*:*:*:* Versions 35.0.1916.98 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.99:*:*:*:*:*:*:* Versions 35.0.1916.99 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.101:*:*:*:*:*:*:* Versions 35.0.1916.101 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.103:*:*:*:*:*:*:* Versions 35.0.1916.103 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.104:*:*:*:*:*:*:* Versions 35.0.1916.104 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.105:*:*:*:*:*:*:* Versions 35.0.1916.105 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.106:*:*:*:*:*:*:* Versions 35.0.1916.106 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.107:*:*:*:*:*:*:* Versions 35.0.1916.107 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.108:*:*:*:*:*:*:* Versions 35.0.1916.108 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.109:*:*:*:*:*:*:* Versions 35.0.1916.109 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.110:*:*:*:*:*:*:* Versions 35.0.1916.110 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.111:*:*:*:*:*:*:* Versions 35.0.1916.111 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:35.0.1916.112:*:*:*:*:*:*:* Versions 35.0.1916.112 Vulnerable ·Google

Remediation

Red Hat 3 advisories

  • RHSA-2025:10364 Released 2025-07-07 · Red Hat rating Important
    webkitgtk4 security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.48.3-2.el7_9, webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-jsc-2.48.3-2.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-doc-2.48.3-2.el7_9, webkitgtk4-jsc-devel-2.48.3-2.el7_9
  • RHSA-2024:2982 Released 2024-05-22 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3-2.42.5-1.el8, webkit2gtk3-devel-2.42.5-1.el8, webkit2gtk3-jsc-2.42.5-1.el8 +1
  • RHSA-2024:2126 Released 2024-04-30 · Red Hat rating Important
    webkit2gtk3 security update
    • Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.42.5-1.el9, webkit2gtk3-devel-2.42.5-1.el9, webkit2gtk3-jsc-2.42.5-1.el9 +1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:2982
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:2126
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:10364
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:10364

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-1745
  2. 2026-10-03 Alias added: GHSA-pr96-m2pj-3g36

References

Advisory 3

Other 4

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 7586 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences