Vulnerability · NVD

CVE-2014-1747

CVE-2014-1747, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 1.8 %
Tracked apps: 2
Still exposed: 0

Published on 2014-05-21

Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."

EPSS 1.81% above median percentile 77.0%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Chrome macOS com.google.Chrome

Affected ≤35.0.1916.113 Fixed in > 35.0.1916.113 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected ≤35.0.1916.113 Fixed in > 35.0.1916.113 Latest tracked 152.0.7977.65 patched

Vulnerable CPE configurations (160)

Vendor	Product	Platform	Versions	CPE 2.3 URI
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤35.0.1916.113	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	≤35.0.1916.113	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.0:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.2:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.3:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.4:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.4:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.5:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.5:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.6:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.6:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.7:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.7:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.8:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.9:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.9:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.10:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.10:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.11:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.11:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.13:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.13:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.14:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.14:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.15:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.15:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.17:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.17:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.18:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.19:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.19:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.20:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.20:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.21:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.22:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.23:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.23:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.27:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.31:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.32:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.33:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.34:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.34:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.35:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.35:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.36:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.37:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.38:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.39:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.40:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.40:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.41:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.41:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.42:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.43:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.44:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.44:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.45:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.45:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.46:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.47:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.47:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.48:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.49:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.49:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.51:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.51:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.52:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.54:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.54:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.56:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.56:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.57:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.57:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.59:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.61:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.61:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.68:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.68:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.69:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.69:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.71:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.71:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.72:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.72:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.74:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.74:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.77:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.77:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.80:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.80:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.82:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.82:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.84:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.84:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.85:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.85:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.86:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.86:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.88:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.88:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.90:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.90:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.92:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.92:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.93:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.93:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.95:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.95:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.96:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.96:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.98:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.98:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.99:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.99:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.101:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.101:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.103:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.103:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.104:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.104:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.105:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.105:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.106:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.106:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.107:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.107:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.108:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.108:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.109:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.109:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.110:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.110:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.111:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.111:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.112:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:google:chrome:35.0.1916.112:::::::*

View on NVD ↗