CVE-2014-3190: Use After Free
Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3190?
CVE-2014-3190 has a high severity rating due to its potential to cause denial of service or other unspecified impacts.
How do I fix CVE-2014-3190?
To fix CVE-2014-3190, ensure you update Google Chrome to version 38.0.2125.101 or later.
Which software is affected by CVE-2014-3190?
CVE-2014-3190 affects Google Chrome versions prior to 38.0.2125.101 and certain versions of Red Hat Enterprise Linux.
What can attackers achieve with CVE-2014-3190?
Attackers can exploit CVE-2014-3190 to execute crafted JavaScript code, potentially leading to application crashes.
When was CVE-2014-3190 disclosed?
CVE-2014-3190 was publicly disclosed in October 2014.