CVE-2014-1747

Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google…

published May 21, 2014

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01806 · 78.4th percentile
Published
2014-05-21T10:00Z
EPSS history
Timeline
  • 21 MAY 10:00Z
    Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google…
    cvelistv5