Read the docs
TI-2014-02550 Aliases CVE-2014-3187GHSA-p4w4-693c-5mf2

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly…

Priority LOW 32CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.

Why it matters now

EPSS 0.00812 57th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 55

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 37.0.2062.59VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.0:*:*:*:*:*:*:*37.0.2062.0VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.1:*:*:*:*:*:*:*37.0.2062.1VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.2:*:*:*:*:*:*:*37.0.2062.2VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.3:*:*:*:*:*:*:*37.0.2062.3VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.4:*:*:*:*:*:*:*37.0.2062.4VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.5:*:*:*:*:*:*:*37.0.2062.5VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.6:*:*:*:*:*:*:*37.0.2062.6VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.10:*:*:*:*:*:*:*37.0.2062.10VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.11:*:*:*:*:*:*:*37.0.2062.11VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 37.0.2062.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.0:*:*:*:*:*:*:* Versions 37.0.2062.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.1:*:*:*:*:*:*:* Versions 37.0.2062.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.2:*:*:*:*:*:*:* Versions 37.0.2062.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.3:*:*:*:*:*:*:* Versions 37.0.2062.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.4:*:*:*:*:*:*:* Versions 37.0.2062.4 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.5:*:*:*:*:*:*:* Versions 37.0.2062.5 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.6:*:*:*:*:*:*:* Versions 37.0.2062.6 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.10:*:*:*:*:*:*:* Versions 37.0.2062.10 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.11:*:*:*:*:*:*:* Versions 37.0.2062.11 Vulnerable ·Google
Show 45 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:37.0.2062.12:*:*:*:*:*:*:*37.0.2062.12VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.13:*:*:*:*:*:*:*37.0.2062.13VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.14:*:*:*:*:*:*:*37.0.2062.14VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.15:*:*:*:*:*:*:*37.0.2062.15VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.16:*:*:*:*:*:*:*37.0.2062.16VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.17:*:*:*:*:*:*:*37.0.2062.17VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.18:*:*:*:*:*:*:*37.0.2062.18VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.19:*:*:*:*:*:*:*37.0.2062.19VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.20:*:*:*:*:*:*:*37.0.2062.20VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.21:*:*:*:*:*:*:*37.0.2062.21VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.22:*:*:*:*:*:*:*37.0.2062.22VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.23:*:*:*:*:*:*:*37.0.2062.23VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.24:*:*:*:*:*:*:*37.0.2062.24VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.25:*:*:*:*:*:*:*37.0.2062.25VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.26:*:*:*:*:*:*:*37.0.2062.26VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.27:*:*:*:*:*:*:*37.0.2062.27VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.28:*:*:*:*:*:*:*37.0.2062.28VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.29:*:*:*:*:*:*:*37.0.2062.29VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.30:*:*:*:*:*:*:*37.0.2062.30VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.31:*:*:*:*:*:*:*37.0.2062.31VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.32:*:*:*:*:*:*:*37.0.2062.32VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.33:*:*:*:*:*:*:*37.0.2062.33VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.34:*:*:*:*:*:*:*37.0.2062.34VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.35:*:*:*:*:*:*:*37.0.2062.35VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.36:*:*:*:*:*:*:*37.0.2062.36VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.37:*:*:*:*:*:*:*37.0.2062.37VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.39:*:*:*:*:*:*:*37.0.2062.39VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.43:*:*:*:*:*:*:*37.0.2062.43VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.44:*:*:*:*:*:*:*37.0.2062.44VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.45:*:*:*:*:*:*:*37.0.2062.45VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.46:*:*:*:*:*:*:*37.0.2062.46VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.47:*:*:*:*:*:*:*37.0.2062.47VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.48:*:*:*:*:*:*:*37.0.2062.48VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.49:*:*:*:*:*:*:*37.0.2062.49VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.50:*:*:*:*:*:*:*37.0.2062.50VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.51:*:*:*:*:*:*:*37.0.2062.51VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.52:*:*:*:*:*:*:*37.0.2062.52VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.53:*:*:*:*:*:*:*37.0.2062.53VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.54:*:*:*:*:*:*:*37.0.2062.54VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.55:*:*:*:*:*:*:*37.0.2062.55VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.56:*:*:*:*:*:*:*37.0.2062.56VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.57:*:*:*:*:*:*:*37.0.2062.57VulnerableGoogle
cpe:2.3:a:google:chrome:37.0.2062.58:*:*:*:*:*:*:*37.0.2062.58VulnerableGoogle
cpe:2.3:a:google:chrome:38.0.2125.7:*:*:*:*:*:*:*38.0.2125.7VulnerableGoogle
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*not specified by NVDVulnerableApple
  • cpe:2.3:a:google:chrome:37.0.2062.12:*:*:*:*:*:*:* Versions 37.0.2062.12 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.13:*:*:*:*:*:*:* Versions 37.0.2062.13 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.14:*:*:*:*:*:*:* Versions 37.0.2062.14 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.15:*:*:*:*:*:*:* Versions 37.0.2062.15 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.16:*:*:*:*:*:*:* Versions 37.0.2062.16 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.17:*:*:*:*:*:*:* Versions 37.0.2062.17 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.18:*:*:*:*:*:*:* Versions 37.0.2062.18 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.19:*:*:*:*:*:*:* Versions 37.0.2062.19 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.20:*:*:*:*:*:*:* Versions 37.0.2062.20 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.21:*:*:*:*:*:*:* Versions 37.0.2062.21 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.22:*:*:*:*:*:*:* Versions 37.0.2062.22 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.23:*:*:*:*:*:*:* Versions 37.0.2062.23 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.24:*:*:*:*:*:*:* Versions 37.0.2062.24 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.25:*:*:*:*:*:*:* Versions 37.0.2062.25 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.26:*:*:*:*:*:*:* Versions 37.0.2062.26 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.27:*:*:*:*:*:*:* Versions 37.0.2062.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.28:*:*:*:*:*:*:* Versions 37.0.2062.28 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.29:*:*:*:*:*:*:* Versions 37.0.2062.29 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.30:*:*:*:*:*:*:* Versions 37.0.2062.30 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.31:*:*:*:*:*:*:* Versions 37.0.2062.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.32:*:*:*:*:*:*:* Versions 37.0.2062.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.33:*:*:*:*:*:*:* Versions 37.0.2062.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.34:*:*:*:*:*:*:* Versions 37.0.2062.34 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.35:*:*:*:*:*:*:* Versions 37.0.2062.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.36:*:*:*:*:*:*:* Versions 37.0.2062.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.37:*:*:*:*:*:*:* Versions 37.0.2062.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.39:*:*:*:*:*:*:* Versions 37.0.2062.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.43:*:*:*:*:*:*:* Versions 37.0.2062.43 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.44:*:*:*:*:*:*:* Versions 37.0.2062.44 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.45:*:*:*:*:*:*:* Versions 37.0.2062.45 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.46:*:*:*:*:*:*:* Versions 37.0.2062.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.47:*:*:*:*:*:*:* Versions 37.0.2062.47 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.48:*:*:*:*:*:*:* Versions 37.0.2062.48 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.49:*:*:*:*:*:*:* Versions 37.0.2062.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.50:*:*:*:*:*:*:* Versions 37.0.2062.50 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.51:*:*:*:*:*:*:* Versions 37.0.2062.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.52:*:*:*:*:*:*:* Versions 37.0.2062.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.53:*:*:*:*:*:*:* Versions 37.0.2062.53 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.54:*:*:*:*:*:*:* Versions 37.0.2062.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.55:*:*:*:*:*:*:* Versions 37.0.2062.55 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.56:*:*:*:*:*:*:* Versions 37.0.2062.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.57:*:*:*:*:*:*:* Versions 37.0.2062.57 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:37.0.2062.58:*:*:*:*:*:*:* Versions 37.0.2062.58 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:38.0.2125.7:*:*:*:*:*:*:* Versions 38.0.2125.7 Vulnerable ·Google
  • cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Apple

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3187
  2. 2026-10-03 Alias added: GHSA-p4w4-693c-5mf2

References

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences