CVE-2014-7927

Removed by vendor...

CVE-2014-7931

CVE-2014-7931 affects Google Chrome (V8) where factory.cc memory-corruption vulnerability can be triggered by crafted JavaScript, potentially causing a crash or memory corruption. The root cause is improper maintenance of backing-store pointers in V8. The issue is present in Chrome before 40.0.22...

Chrome 40 Patches 62 Security Vulnerabilities

Google pushed out on Wednesday a new version of its Chrome browser 40.0.2214.91 and along with it paid out more than two dozen bounties, including 16 for memory corruption vulnerabilities. In all, 62 security vulnerabilities were patched, 17 of those considered high severity bugs by Google. Most ...

PT-2015-5225

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Google V8 versions prior to 3.30.33.15 Description The issue is related to multiple unspecified vulnerabilities in Google V8, which is used in Google Chrome. These vulnerabilities can be exploited b...

CVE-2015-1346

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2014-7928: Undefined Security Weakness

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy...

CVE-2014-7931: Undefined Security Weakness

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers...

CVE-2014-7931

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers...

CVE-2015-1346: Undefined Security Weakness

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2014-7927: Undefined Security Weakness

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2014-7928

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy...

CVE-2014-7939: Undefined Security Weakness

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header...

UBUNTU-CVE-2014-7931

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers...

UBUNTU-CVE-2015-1346

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

UBUNTU-CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

PT-2015-3961

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description The issue is related to the handling of arrays with holes in the hydrogen.cc component of Google V8, as used in Google Chrome. This can be exploited by remote attackers using crafted...

PT-2015-3964

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JavaScript code, affecting the maintenance of backing-store pointers in the...

PT-2015-3960

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description The issue is related to the SimplifiedLowering::DoLoadBuffer function in Google V8, which does not properly choose an integer data type. This allows remote attackers to cause a denial of...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 40 to the stable channel for Windows, Mac and Linux. Chrome 40.0.2214.91 contains a number of fixes and improvements, including: Updated info dialog for Chrome app on Windows and Linux. A new clock behind/ahead error message. A...