VULNERABILITY INTELLIGENCE

CVE-2014-1703

CVSS score7.5 NONE
EPSS probability1.53%
CISA KEVNot currently listed
Published2014-03-16
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.

Weakness classification

  • nvd@nist.gov: CWE-399

Primary references