CVE-2014-1742
HighSummary
A use-after-free vulnerability in the FrameSelection::updateAppearance function in Blink, used in Google Chrome before version 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, affecting the availability of web services and the security of user data.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Google Chrome (Blink)
See all- CVE-2026-7974High
Use after free in Blink in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- CVE-2017-5087High
A use after free in Blink in Google Chrome prior to version 59.0.3071.104 for Mac, Windows, and Linux, and prior to version 59.0.3071.117 for Android, allows a remote attacker to perform an out of bounds memory read via a crafted HTML page, known as an IndexedDB sandbox escape.
- CVE-2017-5064High
Incorrect handling of DOM changes in Blink in Google Chrome prior to version 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2017-5056High
A use after free vulnerability in Blink in Google Chrome prior to version 57.0.2987.133 for Linux, Windows, and Mac, and prior to version 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- CVE-2017-5052High
A flaw in block structure in Blink in Google Chrome prior to version 57.0.2987.133 for Mac, Windows, and Linux, and prior to version 57.0.2987.132 for Android, allows a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.
- CVE-2016-5145High
Blink in Google Chrome before version 52.0.2743.116 does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image. This allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
- CVE-2016-1710High
The ChromeClientImpl::createWindow method in Blink, used in Google Chrome before version 52.0.2743.82, does not prevent window creation by a deferred frame, allowing remote attackers to bypass the Same Origin Policy via a crafted website.
- CVE-2016-1660High
Blink, as used in Google Chrome before version 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes. This allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.
- CVE-2016-1634High
A use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in Blink, used in Google Chrome before version 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted website.
- CVE-2015-1228High
The RenderCounter::updateCounter function in Blink, used in Google Chrome before version 41.0.2272.76, does not force a relayout operation, leading to uninitialized memory for a data structure. This allows remote attackers to cause application crashes or potentially other unspecified impacts via a crafted CSS token sequence.
Original NVD description (English source)
Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.