CVE-2014-3166

The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not…

published August 13, 2014

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01518 · 74.2th percentile
Published
2014-08-13T01:00Z
EPSS history
Timeline
  • 13 AUG 01:00Z
    The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not…
    cvelistv5