VULNERABILITY INTELLIGENCE

CVE-2014-1730

CVSS score7.8 HIGH
EPSS probability3.20%
CISA KEVNot currently listed
Published2014-04-26
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

Weakness classification

  • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

Primary references