CVE-2014-1732
HighSummary
A use-after-free vulnerability in Google Chrome before version 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, potentially disrupting application functionality and affecting service availability.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in Google Chrome
See all- CVE-2026-110172Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110171Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110170Unknown
A use-after-free exists in Bindings in Google Chrome prior to 155.0.8059.79. A remote attacker could read memory inside the sandbox via a crafted HTML page.
- CVE-2026-110169Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110168Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110167Unknown
Use-after-free in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110166Unknown
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110165Unknown
Use-after-free in Core in Google Chrome on Android prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page. Severity: Critical.
- CVE-2026-110164Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110163Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
Original NVD description (English source)
Use-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS