CVE-2014-7928

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy...

CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

UBUNTU-CVE-2014-7939

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header...

Memory corruption

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

Memory corruption

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers...

Memory corruption

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2015-1346

Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2014-7931

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers...

CVE-2014-7928

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy...

CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2015-1346

Removed by vendor...

CVE-2014-7928

CVE-2014-7928 affects Google Chrome before 40.0.2214.91 via Google V8’s hydrogen.cc handling of arrays with holes, enabling remote memory corruption and possible DoS or other impact through crafted JavaScript. Connected sources (Nessus/OS advisories) confirm this as a memory corruption vulnerabil...

CVE-2014-7931

CVE-2014-7931 affects Google Chrome (V8) where factory.cc memory-corruption vulnerability can be triggered by crafted JavaScript, potentially causing a crash or memory corruption. The root cause is improper maintenance of backing-store pointers in V8. The issue is present in Chrome before 40.0.22...

CVE-2014-7931

Removed by vendor...

CVE-2014-7928

Removed by vendor...

CVE-2014-7927

Removed by vendor...

CVE-2015-1346

CVE-2015-1346 covers multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, used in Google Chrome before 40.0.2214.91. The NVD entry notes potential denial of service or other impact via unknown vectors. Connected sources corroborate Chrome/Chromium lineage and list affected version...

CVE-2014-7927

CVE-2014-7927 : In Google V8, the SimplifiedLowering::DoLoadBuffer path in compiler/simplified-lowering.cc does not properly select an integer data type, allowing a remote attacker crafting JavaScript to trigger memory corruption and thus a denial of service. Affected product: Google Chrome (and ...

Chrome 40 Patches 62 Security Vulnerabilities

Google pushed out on Wednesday a new version of its Chrome browser 40.0.2214.91 and along with it paid out more than two dozen bounties, including 16 for memory corruption vulnerabilities. In all, 62 security vulnerabilities were patched, 17 of those considered high severity bugs by Google. Most ...