$ cve CVE-2014-7910 JSON

CVE-2014-7910 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 7.7% (pctl 94)

Patch early

A public exploit exists.

Description

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	7.65% — more likely to be exploited than 94% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2014-11-19
Last modified	2026-06-17

Affected (1)

Vendor	Product
google	chrome

Public exploits

Source	Title	Date
exploit-db	Kemp Load Master 7.1.16 - Multiple Vulnerabilities	2015-04-02
exploit-db	QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)	2015-03-26
exploit-db	QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)	2015-03-26
exploit-db	PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection	2014-11-03
exploit-db	CUPS Filter - Bash Environment Variable Code Injection (Metasploit)	2014-10-29
exploit-db	Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)	2014-10-06
exploit-db	Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection	2014-10-06
exploit-db	OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection	2014-10-04
exploit-db	GNU bash 4.3.11 - Environment Variable dhclient	2014-10-02
exploit-db	Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)	2014-10-02
exploit-db	IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection	2014-10-01
exploit-db	GNU Bash - 'Shellshock' Environment Variable Command Injection	2014-09-25
exploit-db	Bash - 'Shellshock' Environment Variables Command Injection	2014-09-25
exploit-db	GNU Bash - Environment Variable Command Injection (Metasploit)	2014-09-25

References

→ the Explorer · watch your stack · NVD