CVE-2014-7946

The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

CVE-2014-7930

CVE-2014-7930 is a use-after-free in Blink’s DOM TreeScopeEventContext.cpp affecting Google Chrome prior to 40.0.2214.91. Exploitation via crafted JavaScript could cause a denial of service or other unspecified impact by mishandling TreeScope data. The issue is embedded in Chrome’s Blink engine a...

CVE-2014-7925

Removed by vendor...

CVE-2014-7925

CVE-2014-7925 affects Blink’s WebAudio: a use-after-free in the audio-rendering thread can allow a remote attacker to cause a denial of service, with possible other impact. Evidence across multiple advisories shows Chrome/Blink remediation via upgrade to a fixed Chrome version (40.0.2214.91/111 d...

CVE-2014-7934

CVE-2014-7934 describes a use-after-free vulnerability in the Blink DOM implementation used by Google Chrome before 40.0.2214.91. The issue arises from an unexpected absence of document data structures in the DOM, which can lead to a denial of service and possibly other unspecified impacts. The v...

CVE-2014-7930

Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper...

CVE-2014-7925

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improper...

CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2014-7946

Removed by vendor...

CVE-2014-7932

CVE-2014-7932 is a use-after-free in Blink’s DOM implementation (Element::detach in core/dom/Element.cpp) used by Google Chrome before 40.0.2214.91. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via vectors involving pending updates of detache...

CVE-2014-7946

CVE-2014-7946 is a vulnerability in Google Chrome's Blink engine (RenderTable.cpp) where RenderTable::simplifiedNormalFlowLayout skips captions during certain table layouts, enabling an out-of-bounds read and potential denial of service. Affected component is Blink/Chromium prior to version 40.0....

CVE-2014-7929

Chrome Blink use-after-free in DOM HTMLScriptElement::didMoveToNewDocument (CVE-2014-7929). Affects Google Chrome before 40.0.2214.91; vulnerability occurs when moving a SCRIPT element across documents, enabling remote DoS or unspecified impact. Mitigation: update to Chrome 40.0.2214.91 or newer ...

CVE-2014-7934

Removed by vendor...

CVE-2014-7929

Removed by vendor...

CVE-2014-7934

Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures...

CVE-2014-7925

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improper...

UBUNTU-CVE-2014-7925

Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improper...

UBUNTU-CVE-2014-7934

Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures...

UBUNTU-CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact...

UBUNTU-CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...