CVE-2014-7932

High

Published: 22/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Use-after-free vulnerability in the Element::detach function in the DOM implementation in Blink, used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, potentially affecting the availability of web applications and the security of user data.

Recommendation

It is recommended to update Google Chrome to version 40.0.2214.91 or later to mitigate this vulnerability.

Other vulnerabilities in Google Chrome (przed wersją 40.0.2214.91)

CVE-2014-7929High
A use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in the DOM implementation in Blink, as used in Google Chrome before version 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.

Original NVD description (English source)

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.