CVE-2014-1726 — Google Chrome vulnerability

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 33.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedApr 9
Latest updateMay 17

Description

The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome34.0.1847.115

🔴Vulnerability Details

2
GHSA
GHSA-8wwh-wv27-42xx: The drag implementation in Google Chrome before 34↗2022-05-17
▶
OSV
CVE-2014-1726: The drag implementation in Google Chrome before 34↗2014-04-09
▶