CVE-2014-1733
HighSummary
The PointerCompare function in codegen.cc in Seccomp-BPF, used in Google Chrome before version 34.0.1847.131 on Windows and OS X and before version 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.
Risk Assessment
Attackers may exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious data security breaches.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for potential attack attempts.
Other vulnerabilities in Google Chrome
See all- CVE-2026-110172Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110171Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110170Unknown
A use-after-free exists in Bindings in Google Chrome prior to 155.0.8059.79. A remote attacker could read memory inside the sandbox via a crafted HTML page.
- CVE-2026-110169Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110168Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110167Unknown
Use-after-free in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110166Unknown
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110165Unknown
Use-after-free in Core in Google Chrome on Android prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page. Severity: Critical.
- CVE-2026-110164Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110163Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
Original NVD description (English source)
The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS