Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/chromium. | Oct 30, 2017 | Oct 8, 2014 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Oct 10, 2014 | Oct 7, 2014 |
| Suse | — | Upgrade chromium | Dec 18, 2015 | Oct 8, 2014 |
| Ubuntu | — | Upgrade oxideqt-codecs-extraUpgrade liboxideqtcore0Upgrade oxideqt-codecs | Nov 8, 2024 | Oct 8, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub