Back to Database
Status published
High
CVE-2014-3154
Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the...
Vulnerability Description
Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3154
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/59090
- http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html
- https://src.chromium.org/viewvc/chrome?revision=269345&view=revision
- http://security.gentoo.org/glsa/glsa-201408-16.xml
- http://secunia.com/advisories/60372
- http://www.securityfocus.com/bid/67977
- http://secunia.com/advisories/60061
- https://src.chromium.org/viewvc/blink?revision=173620&view=revision
- http://secunia.com/advisories/58585
- https://code.google.com/p/chromium/issues/detail?id=369525
- http://www.debian.org/security/2014/dsa-2959
More from google
View All →CVE-2025-24959
Environment Variable Injection for dotenv API in zx
Low
1
CVE-2024-45601
Local file Inclusion via static file serving functionality in Mesop
High
7.5
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
Critical
9.6
CVE-2022-31055
Improper Access Control in kctf
High
7.5
CVE-2022-23569
`CHECK`-fails when building invalid tensor shapes in Tensorflow
Medium
6.5
Affected Vendor
Affected Software
chrome
Vulnerable Versions:
0, 35.0.1916.0, 35.0.1916.1, 35.0.1916.2, 35.0.1916.3, 35.0.1916.4, 35.0.1916.5, 35.0.1916.6, 35.0.1916.7, 35.0.1916.8, 35.0.1916.9, 35.0.1916.10, 35.0.1916.11, 35.0.1916.13, 35.0.1916.14, 35.0.1916.15, 35.0.1916.17, 35.0.1916.18, 35.0.1916.19, 35.0.1916.20, 35.0.1916.21, 35.0.1916.22, 35.0.1916.23, 35.0.1916.27, 35.0.1916.31, 35.0.1916.32, 35.0.1916.33, 35.0.1916.34, 35.0.1916.35, 35.0.1916.36, 35.0.1916.37, 35.0.1916.38, 35.0.1916.39, 35.0.1916.40, 35.0.1916.41, 35.0.1916.42, 35.0.1916.43, 35.0.1916.44, 35.0.1916.45, 35.0.1916.46, 35.0.1916.47, 35.0.1916.48, 35.0.1916.49, 35.0.1916.51, 35.0.1916.52, 35.0.1916.54, 35.0.1916.56, 35.0.1916.57, 35.0.1916.59, 35.0.1916.61, 35.0.1916.68, 35.0.1916.69, 35.0.1916.71, 35.0.1916.72, 35.0.1916.74, 35.0.1916.77, 35.0.1916.80, 35.0.1916.82, 35.0.1916.84, 35.0.1916.85, 35.0.1916.86, 35.0.1916.88, 35.0.1916.90, 35.0.1916.92, 35.0.1916.93, 35.0.1916.95, 35.0.1916.96, 35.0.1916.98, 35.0.1916.99, 35.0.1916.101, 35.0.1916.103, 35.0.1916.104, 35.0.1916.105, 35.0.1916.106, 35.0.1916.107, 35.0.1916.108, 35.0.1916.109, 35.0.1916.110, 35.0.1916.111, 35.0.1916.112, 35.0.1916.113, 35.0.1916.114, 35.0.1916.115, 35.0.1916.116, 35.0.1916.117, 35.0.1916.118, 35.0.1916.119, 35.0.1916.120, 35.0.1916.121, 35.0.1916.122, 35.0.1916.123, 35.0.1916.124, 35.0.1916.125, 35.0.1916.126, 35.0.1916.127, 35.0.1916.128, 35.0.1916.137, 35.0.1916.138, 35.0.1916.140, 35.0.1916.141, 35.0.1916.142, 35.0.1916.149, 35.0.1916.150, 35.0.1916.151
Timeline
Official Publish:
June 11th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.