Skip to content
CVSS 7.1 · HIGH

CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

Ver en NVD

Severidad

Puntaje: 7.1(HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
AV: NETWORK
AC: LOW
PR: NONE
UI: REQUIRED
S: UNCHANGED
C: HIGH
I: NONE
A: LOW
Tipo de falla (CWE): CWE-399

EPSS

Probabilidad de explotación (próx. 30 días): 0.0080 (0.8%)
Percentil: 74.2%
EPSS: 2026-05-06

Afecta

google:chrome

Descripción técnica

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.

Publicada: 21/5/2014, 11:14:09
Última modificación: 6/5/2026, 22:30:45

Referencias

InicioEventosBlogRecursosEquipo