CVE-2014-3196
HighSummary
In Google Chrome before version 38.0.2125.101 on Windows, there is an issue with improper implementation of read-only restrictions on shared memory, allowing attackers to bypass a sandbox protection mechanism.
Risk Assessment
Attackers may exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in Google Chrome
See all- CVE-2026-110172Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110171Unknown
A use-after-free exists in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-110170Unknown
A use-after-free exists in Bindings in Google Chrome prior to 155.0.8059.79. A remote attacker could read memory inside the sandbox via a crafted HTML page.
- CVE-2026-110169Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110168Unknown
Use-after-free in V8 in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110167Unknown
Use-after-free in Media in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110166Unknown
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110165Unknown
Use-after-free in Core in Google Chrome on Android prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page. Severity: Critical.
- CVE-2026-110164Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
- CVE-2026-110163Unknown
Use-after-free in DOM in Google Chrome prior to 155.0.8059.79. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Severity: High.
Original NVD description (English source)
base/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not properly implement read-only restrictions on shared memory, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS