CVE-2014-1745
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
Exploit likelihood
What each source reports
CVE List
7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
CVE-2014-1745- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - Weakness
- CWE-399
- Updated
- 2026-11-02
EUVDEUVD-2014-1819
7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
EUVD-2014-1819- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-pr96-m2pj-3g36
7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
GHSA-pr96-m2pj-3g36- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
NVD
7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
CVE-2014-1745- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1745
7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
DEBIAN-CVE-2014-1745- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2024:2126
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:2126- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSVRHSA-2024:2982
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:2982- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10364
10.0
Red Hat Security Advisory: webkitgtk4 security update
- Record
RHSA-2025:10364- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1745
7.1
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
UBUNTU-CVE-2014-1745- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
OSVALSA-2024:2126 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
- webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
- webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
- webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
- webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
- webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
- webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
- webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2126- Updated
- 2026-11-02
OSVALSA-2024:2982 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
- webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
- webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
- webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
- webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
- webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
- webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
- webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2982- Updated
- 2026-11-05
OSV No score
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.
- Record
CVE-2014-1745- Updated
- 2026-11-02
OSVMGASA-2024-0148 No score
Updated webkit2 packages fix security vulnerabilities
Due to issues in our build system this package is very outdated, now that the issues are fixed we are publishing the current upstream version. Lot of CVEs are fixed and a lot of changes were made by upstream, see the links.
- Record
MGASA-2024-0148- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
OSVRLSA-2024:2982 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
-
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
-
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
-
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
-
webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
-
webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
-
webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
-
webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
-
webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
-
webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
-
webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:2982- Updated
- 2026-11-02
OSVSUSE-SU-2024:0519-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.5 (bsc#1219604):
- CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113).
- CVE-2024-23206: Fixed fingerprint user via maliciously crafted webpages (bsc#1219604).
- CVE-2024-23213: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- CVE-2023-40414: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- CVE-2014-1745: Fixed denial-of-service or potentially disclose memory contents while processing maliciously crafted files (bsc#1219604).
- CVE-2023-42833: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- Record
SUSE-SU-2024:0519-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0545-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.5 (bsc#1219604):
- CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113).
- CVE-2024-23206: Fixed fingerprint user via maliciously crafted webpages (bsc#1219604).
- CVE-2024-23213: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- CVE-2023-40414: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- CVE-2014-1745: Fixed denial-of-service or potentially disclose memory contents while processing maliciously crafted files (bsc#1219604).
- CVE-2023-42833: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- Record
SUSE-SU-2024:0545-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0548-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.5 (bsc#1219604):
- CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113).
- CVE-2024-23206: Fixed fingerprint user via maliciously crafted webpages (bsc#1219604).
- CVE-2024-23213: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- CVE-2023-40414: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- CVE-2014-1745: Fixed denial-of-service or potentially disclose memory contents while processing maliciously crafted files (bsc#1219604).
- CVE-2023-42833: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).
- Record
SUSE-SU-2024:0548-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3AlmaLinux:9 |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3-develAlmaLinux:9 |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3-jscAlmaLinux:9 |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3-jsc-develAlmaLinux:9 |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3AlmaLinux:8 |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtk3-develAlmaLinux:8 |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtk3-jscAlmaLinux:8 |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtk3-jsc-develAlmaLinux:8 |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtkDebian:12 |
before 2.42.1-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 21 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u2 |
2.42.1-1~deb12u1 |
webkit2gtkDebian:13 |
before 2.42.0-1 | 2.42.0-1 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkDebian:14 |
before 2.42.0-1 | 2.42.0-1 |
wpewebkitDebian:12 |
All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2 |
None known |
wpewebkitDebian:13 |
before 2.42.0-1 | 2.42.0-1 |
wpewebkitDebian:14 |
before 2.42.0-1 | 2.42.0-1 |
chromium-browserDebian:7 |
before 35.0.1916.114-1~deb7u2, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 38 moreShow less27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-329.0.1547.57-129.0.1547.57-1~deb7u129.0.1547.57-229.0.1547.57-329.0.1547.57-3+exp130.0.1599.101-130.0.1599.101-1~deb7u130.0.1599.101-230.0.1599.101-331.0.1650.57-131.0.1650.57-1~deb7u131.0.1650.63-131.0.1650.63-1~deb7u132.0.1700.123-132.0.1700.123-1~deb7u132.0.1700.123-232.0.1700.123-332.0.1700.123-433.0.1750.152-133.0.1750.152-1~deb7u134.0.1847.116-134.0.1847.116-1~deb7u134.0.1847.116-234.0.1847.132-134.0.1847.132-1~deb7u134.0.1847.137-134.0.1847.137-1~deb7u135.0.1916.114-1~deb7u135.0.1916.86-135.0.1916.99-1 |
35.0.1916.114-1~deb7u2 |
webkit2gtkDebian:11 |
before 2.42.1-1~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 45 moreShow less2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1 |
2.42.1-1~deb11u1 |
webkit2Mageia:9 |
before 2.44.1-1.mga9 | 2.44.1-1.mga9 |
webkit2gtk3Red Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3Red Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-develRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jscRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkitgtk4Red Hat:rhel_els:7 |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-debuginfoRed Hat:rhel_els:7 |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-develRed Hat:rhel_els:7 |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jscRed Hat:rhel_els:7 |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jsc-develRed Hat:rhel_els:7 |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-docRed Hat:rhel_els:7 |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkit2gtk3Rocky Linux:8 |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP3-LTSS |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Enterprise Storage 7.1 |
before 2.42.5-150200.104.1 | 2.42.5-150200.104.1 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.42.5-2.168.2 | 2.42.5-2.168.2 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP5 |
before 2.42.5-2.168.2 | 2.42.5-2.168.2 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.42.5-2.168.2 | 2.42.5-2.168.2 |
webkit2gtk3SUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 2.42.5-2.168.2 | 2.42.5-2.168.2 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk4SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk4SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP4-LTSS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Server 15 SP4-LTSS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk4SUSE:Linux Enterprise Server 15 SP4-LTSS |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk4SUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2SUSE:Manager Proxy 4.3 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2SUSE:Manager Server 4.3 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3openSUSE:Leap 15.5 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk3-soup2openSUSE:Leap 15.5 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
webkit2gtk4openSUSE:Leap 15.5 |
before 2.42.5-150400.4.75.1 | 2.42.5-150400.4.75.1 |
chromium-browserUbuntu:14.04:LTS |
before 36.0.1985.125-0ubuntu1.14.04.0~pkg1029, plus listed versions 29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2 |
36.0.1985.125-0ubuntu1.14.04.0~pkg1029 |
chromiumopenSUSE:Tumbleweed |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1745 is a high vulnerability (CVSS 7.5) in Google Chrome, published May 21, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. Fixed in webkit2gtk3 2.42.5-1.el9.
References
debian.org/security/2014/dsa-2939
googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
security.gentoo.org/glsa/glsa-201408-16.xml
lists.opensuse.org/opensuse-updates/2014-06/msg00023.html
secunia.com/advisories/59155
code.google.com/p/chromium/issues/detail?id=346192
Show 194 moreShow less
src.chromium.org/viewvc/blink?revision=167993&view=revision
secunia.com/advisories/58920
securitytracker.com/id/1030270
openwall.com/lists/oss-security/2024/02/05/8
nvd.nist.gov/vuln/detail/CVE-2014-1745
github.com/advisories/GHSA-pr96-m2pj-3g36
access.redhat.com/errata/RHSA-2024:2126
access.redhat.com/security/cve/CVE-2014-1745
access.redhat.com/security/cve/CVE-2023-32359
access.redhat.com/security/cve/CVE-2023-39928
access.redhat.com/security/cve/CVE-2023-40414
access.redhat.com/security/cve/CVE-2023-41983
access.redhat.com/security/cve/CVE-2023-42852
access.redhat.com/security/cve/CVE-2023-42883
access.redhat.com/security/cve/CVE-2023-42890
access.redhat.com/security/cve/CVE-2024-23206
access.redhat.com/security/cve/CVE-2024-23213
bugzilla.redhat.com/2241400
bugzilla.redhat.com/2254326
bugzilla.redhat.com/2254327
bugzilla.redhat.com/2269743
bugzilla.redhat.com/2270141
bugzilla.redhat.com/2270143
bugzilla.redhat.com/2270151
bugzilla.redhat.com/2271449
bugzilla.redhat.com/2271453
bugzilla.redhat.com/2271456
errata.almalinux.org/9/ALSA-2024-2126.html
access.redhat.com/errata/RHSA-2024:2982
bugzilla.redhat.com/2253058
errata.almalinux.org/8/ALSA-2024-2982.html
redhat.com/security/data/cve/CVE-2023-42875.html
redhat.com/security/data/cve/CVE-2023-42917.html
redhat.com/security/data/cve/CVE-2023-42970.html
redhat.com/security/data/cve/CVE-2023-43000.html
security-tracker.debian.org/tracker/CVE-2014-1745
advisories.mageia.org/MGASA-2024-0148.html
bugs.mageia.org/show_bug.cgi?id=32202
webkitgtk.org/2024/04/09/webkitgtk2.44.1-released.html
webkitgtk.org/2024/03/16/webkitgtk2.44.0-released.html
webkitgtk.org/2024/02/02/webkitgtk2.43.4-released.html
webkitgtk.org/2024/02/05/webkitgtk2.42.5-released.html
webkitgtk.org/2023/12/21/webkitgtk2.43.3-released.html
webkitgtk.org/2023/12/15/webkitgtk2.42.4-released.html
webkitgtk.org/2023/12/05/webkitgtk2.42.3-released.html
webkitgtk.org/2023/11/17/webkitgtk2.43.1-released.html
webkitgtk.org/2023/11/10/webkitgtk2.42.2-released.html
webkitgtk.org/2023/09/15/webkitgtk2.42.0-released.html
webkitgtk.org/2023/09/08/webkitgtk2.41.92-released.html
webkitgtk.org/2023/08/19/webkitgtk2.41.91-released.html
webkitgtk.org/2023/08/10/webkitgtk2.41.90-released.html
webkitgtk.org/2023/08/01/webkitgtk2.40.5-released.html
webkitgtk.org/2023/07/21/webkitgtk2.40.4-released.html
webkitgtk.org/2023/07/04/webkitgtk2.41.6-released.html
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.4_release_notes/index
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2241400
bugzilla.redhat.com/show_bug.cgi?id=2253058
bugzilla.redhat.com/show_bug.cgi?id=2254326
bugzilla.redhat.com/show_bug.cgi?id=2254327
bugzilla.redhat.com/show_bug.cgi?id=2270143
bugzilla.redhat.com/show_bug.cgi?id=2270151
bugzilla.redhat.com/show_bug.cgi?id=2271449
bugzilla.redhat.com/show_bug.cgi?id=2271453
bugzilla.redhat.com/show_bug.cgi?id=2271456
bugzilla.redhat.com/show_bug.cgi?id=2314696
issues.redhat.com/browse/RHEL-3960
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2126.json
cve.org/CVERecord?id=CVE-2014-1745
webkitgtk.org/security/WSA-2024-0001.html
cve.org/CVERecord?id=CVE-2023-32359
nvd.nist.gov/vuln/detail/CVE-2023-32359
webkitgtk.org/security/WSA-2023-0010.html
cve.org/CVERecord?id=CVE-2023-39928
nvd.nist.gov/vuln/detail/CVE-2023-39928
webkitgtk.org/security/WSA-2023-0009.html
cve.org/CVERecord?id=CVE-2023-40414
nvd.nist.gov/vuln/detail/CVE-2023-40414
cve.org/CVERecord?id=CVE-2023-41983
nvd.nist.gov/vuln/detail/CVE-2023-41983
cve.org/CVERecord?id=CVE-2023-42852
nvd.nist.gov/vuln/detail/CVE-2023-42852
access.redhat.com/security/cve/CVE-2023-42875
bugzilla.redhat.com/show_bug.cgi?id=2366497
cve.org/CVERecord?id=CVE-2023-42875
nvd.nist.gov/vuln/detail/CVE-2023-42875
webkitgtk.org/security/WSA-2025-0004.html
cve.org/CVERecord?id=CVE-2023-42883
nvd.nist.gov/vuln/detail/CVE-2023-42883
cve.org/CVERecord?id=CVE-2023-42890
nvd.nist.gov/vuln/detail/CVE-2023-42890
access.redhat.com/security/cve/CVE-2023-42917
cve.org/CVERecord?id=CVE-2023-42917
nvd.nist.gov/vuln/detail/CVE-2023-42917
webkitgtk.org/security/WSA-2023-0011.html
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2023-42970
bugzilla.redhat.com/show_bug.cgi?id=2366498
cve.org/CVERecord?id=CVE-2023-42970
nvd.nist.gov/vuln/detail/CVE-2023-42970
access.redhat.com/security/cve/CVE-2023-43000
cve.org/CVERecord?id=CVE-2023-43000
nvd.nist.gov/vuln/detail/CVE-2023-43000
webkitgtk.org/security/WSA-2025-0008.html
access.redhat.com/security/cve/CVE-2024-23271
cve.org/CVERecord?id=CVE-2024-23271
nvd.nist.gov/vuln/detail/CVE-2024-23271
webkitgtk.org/security/WSA-2024-0005.html
docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.10_release_notes/index
issues.redhat.com/browse/RHEL-3961
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2982.json
access.redhat.com/errata/RHSA-2025:10364
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10364.json
access.redhat.com/security/cve/CVE-2020-9802
cve.org/CVERecord?id=CVE-2020-9802
nvd.nist.gov/vuln/detail/CVE-2020-9802
access.redhat.com/security/cve/CVE-2020-9803
cve.org/CVERecord?id=CVE-2020-9803
nvd.nist.gov/vuln/detail/CVE-2020-9803
access.redhat.com/security/cve/CVE-2020-9805
cve.org/CVERecord?id=CVE-2020-9805
nvd.nist.gov/vuln/detail/CVE-2020-9805
access.redhat.com/security/cve/CVE-2020-9806
cve.org/CVERecord?id=CVE-2020-9806
nvd.nist.gov/vuln/detail/CVE-2020-9806
cve.org/CVERecord?id=CVE-2020-9807
nvd.nist.gov/vuln/detail/CVE-2020-9807
cve.org/CVERecord?id=CVE-2020-9843
nvd.nist.gov/vuln/detail/CVE-2020-9843
cve.org/CVERecord?id=CVE-2020-9850
nvd.nist.gov/vuln/detail/CVE-2020-9850
cve.org/CVERecord?id=CVE-2020-9862
nvd.nist.gov/vuln/detail/CVE-2020-9862
cve.org/CVERecord?id=CVE-2020-9893
nvd.nist.gov/vuln/detail/CVE-2020-9893
cve.org/CVERecord?id=CVE-2020-9894
nvd.nist.gov/vuln/detail/CVE-2020-9894
nvd.nist.gov/vuln/detail/CVE-2020-9895
talosintelligence.com/vulnerability_reports/TALOS-2020-1214
wpewebkit.org/security/WSA-2022-0007.html
bugs.webkit.org/show_bug.cgi?id=242683
github.com/advisories/GHSA-6qjh-p74q-89mv
wpewebkit.org/security/WSA-2023-0008.html
seclists.org/fulldisclosure/2024/Mar/21
support.apple.com/en-us/120896
support.apple.com/en-us/120898
support.apple.com/en-us/120901
support.apple.com/en-us/120902
support.apple.com/en-us/120903
support.apple.com/en-us/120905
support.apple.com/en-us/120906
support.apple.com/en-us/121238
support.apple.com/en-us/121241
support.apple.com/en-us/121837
support.apple.com/en-us/121838
support.apple.com/en-us/121839
support.apple.com/en-us/121843
support.apple.com/en-us/121844
support.apple.com/en-us/121845
support.apple.com/en-us/121846
support.apple.com/en-us/122066
support.apple.com/en-us/122068
support.apple.com/en-us/122073
support.apple.com/en-us/122074
support.apple.com/en-us/122071
support.apple.com/en-us/122072
support.apple.com/en-us/122281
errata.rockylinux.org/RLSA-2024:2982
suse.com/support/update/announcement/2024/suse-su-20240519-1
bugzilla.suse.com/1219113
bugzilla.suse.com/1219604
suse.com/security/cve/CVE-2014-1745
suse.com/security/cve/CVE-2023-40414
suse.com/security/cve/CVE-2023-42833
suse.com/security/cve/CVE-2024-23206
suse.com/security/cve/CVE-2024-23213
suse.com/security/cve/CVE-2024-23222
suse.com/support/update/announcement/2024/suse-su-20240545-1
suse.com/support/update/announcement/2024/suse-su-20240548-1
ubuntu.com/security/CVE-2014-1745
suse.com/security/cve/CVE-2011-3015
suse.com/security/cve/CVE-2011-3016
suse.com/security/cve/CVE-2011-3017
suse.com/security/cve/CVE-2011-3018
suse.com/security/cve/CVE-2011-3019
suse.com/security/cve/CVE-2011-3020
suse.com/security/cve/CVE-2011-3021
suse.com/security/cve/CVE-2011-3022
suse.com/security/cve/CVE-2011-3023
suse.com/security/cve/CVE-2011-3024
suse.com/security/cve/CVE-2011-3025
suse.com/security/cve/CVE-2011-3026
suse.com/security/cve/CVE-2011-3027
suse.com/security/cve/CVE-2011-3031
Left out here: 66 versions and 3,196 references. The JSON record has them.