2 matches found
UBUNTU-CVE-2014-9689
content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...
5CVSS5.7AI score0.01205EPSS
SaveExploits0References7
PT-2015-4355
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Description The issue allows remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for ondeviceorientation events. This is achieved by no...
7.5CVSS0.02452EPSS
SaveExploits0References42
20