CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of…

High · published May 21, 2014

CVSS v3.1
7.1
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01681 · 76.6th percentile
Published
2014-05-21T00:00Z
EPSS history
Timeline
  • 21 MAY 00:00Z
    Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of…
    cvelistv5