What’s Vulnerable › Vulnerabilities

CVE-2014-1704

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-03-16 · updated 2026-06-17

Description

Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Affected products

• Google Chrome: through 33.0.1750.146; 33.0.1750.0, 33.0.1750.1, 33.0.1750.2, 33.0.1750.3, 33.0.1750.4, 33.0.1750.5 (+100)
• Google V8: through 3.23.17; 3.23.0, 3.23.1, 3.23.2, 3.23.3, 3.23.4, 3.23.5 (+11)

References

• http://googlechromereleases.blogspot.com/2014/03/stable-channel-update_11.html
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00008.html
• http://security.gentoo.org/glsa/glsa-201408-16.xml
• http://www.debian.org/security/2014/dsa-2883
• http://www.securitytracker.com/id/1029914
• https://code.google.com/p/chromium/issues/detail?id=328202
• https://code.google.com/p/chromium/issues/detail?id=345715
• https://code.google.com/p/chromium/issues/detail?id=349079
• https://code.google.com/p/v8/source/detail?r=18564
• https://code.google.com/p/v8/source/detail?r=19614
• https://code.google.com/p/v8/source/detail?r=19668
• http://googlechromereleases.blogspot.com/2014/03/stable-channel-update_11.html

Get alerted when CVE-2014-1704 or the next vulnerability affects your stack