Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3154


Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown.


Security Impact Summary

CVE-2014-3154 is a security vulnerability that . Impacting 1 product from google organizations running these solutions should prioritize assessment and patching.

Historical Context

Documented in 2014, this vulnerability occurred amid the cloud computing expansion era, where traditional network perimeter security models were being reevaluated. Organizations were transitioning from isolated infrastructure to interconnected systems, creating new attack surfaces that vulnerabilities like this could exploit.


Published

2014-06-11T10:57:18.487

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application google chrome ≤ 35.0.1916.152 Yes
Application google chrome 35.0.1916.0 Yes
Application google chrome 35.0.1916.1 Yes
Application google chrome 35.0.1916.2 Yes
Application google chrome 35.0.1916.3 Yes
Application google chrome 35.0.1916.4 Yes
Application google chrome 35.0.1916.5 Yes
Application google chrome 35.0.1916.6 Yes
Application google chrome 35.0.1916.7 Yes
Application google chrome 35.0.1916.8 Yes
Application google chrome 35.0.1916.9 Yes
Application google chrome 35.0.1916.10 Yes
Application google chrome 35.0.1916.11 Yes
Application google chrome 35.0.1916.13 Yes
Application google chrome 35.0.1916.14 Yes
Application google chrome 35.0.1916.15 Yes
Application google chrome 35.0.1916.17 Yes
Application google chrome 35.0.1916.18 Yes
Application google chrome 35.0.1916.19 Yes
Application google chrome 35.0.1916.20 Yes
Application google chrome 35.0.1916.21 Yes
Application google chrome 35.0.1916.22 Yes
Application google chrome 35.0.1916.23 Yes
Application google chrome 35.0.1916.27 Yes
Application google chrome 35.0.1916.31 Yes
Application google chrome 35.0.1916.32 Yes
Application google chrome 35.0.1916.33 Yes
Application google chrome 35.0.1916.34 Yes
Application google chrome 35.0.1916.35 Yes
Application google chrome 35.0.1916.36 Yes
Application google chrome 35.0.1916.37 Yes
Application google chrome 35.0.1916.38 Yes
Application google chrome 35.0.1916.39 Yes
Application google chrome 35.0.1916.40 Yes
Application google chrome 35.0.1916.41 Yes
Application google chrome 35.0.1916.42 Yes
Application google chrome 35.0.1916.43 Yes
Application google chrome 35.0.1916.44 Yes
Application google chrome 35.0.1916.45 Yes
Application google chrome 35.0.1916.46 Yes
Application google chrome 35.0.1916.47 Yes
Application google chrome 35.0.1916.48 Yes
Application google chrome 35.0.1916.49 Yes
Application google chrome 35.0.1916.51 Yes
Application google chrome 35.0.1916.52 Yes
Application google chrome 35.0.1916.54 Yes
Application google chrome 35.0.1916.56 Yes
Application google chrome 35.0.1916.57 Yes
Application google chrome 35.0.1916.59 Yes
Application google chrome 35.0.1916.61 Yes
Application google chrome 35.0.1916.68 Yes
Application google chrome 35.0.1916.69 Yes
Application google chrome 35.0.1916.71 Yes
Application google chrome 35.0.1916.72 Yes
Application google chrome 35.0.1916.74 Yes
Application google chrome 35.0.1916.77 Yes
Application google chrome 35.0.1916.80 Yes
Application google chrome 35.0.1916.82 Yes
Application google chrome 35.0.1916.84 Yes
Application google chrome 35.0.1916.85 Yes
Application google chrome 35.0.1916.86 Yes
Application google chrome 35.0.1916.88 Yes
Application google chrome 35.0.1916.90 Yes
Application google chrome 35.0.1916.92 Yes
Application google chrome 35.0.1916.93 Yes
Application google chrome 35.0.1916.95 Yes
Application google chrome 35.0.1916.96 Yes
Application google chrome 35.0.1916.98 Yes
Application google chrome 35.0.1916.99 Yes
Application google chrome 35.0.1916.101 Yes
Application google chrome 35.0.1916.103 Yes
Application google chrome 35.0.1916.104 Yes
Application google chrome 35.0.1916.105 Yes
Application google chrome 35.0.1916.106 Yes
Application google chrome 35.0.1916.107 Yes
Application google chrome 35.0.1916.108 Yes
Application google chrome 35.0.1916.109 Yes
Application google chrome 35.0.1916.110 Yes
Application google chrome 35.0.1916.111 Yes
Application google chrome 35.0.1916.112 Yes
Application google chrome 35.0.1916.113 Yes
Application google chrome 35.0.1916.114 Yes
Application google chrome 35.0.1916.115 Yes
Application google chrome 35.0.1916.116 Yes
Application google chrome 35.0.1916.117 Yes
Application google chrome 35.0.1916.118 Yes
Application google chrome 35.0.1916.119 Yes
Application google chrome 35.0.1916.120 Yes
Application google chrome 35.0.1916.121 Yes
Application google chrome 35.0.1916.122 Yes
Application google chrome 35.0.1916.123 Yes
Application google chrome 35.0.1916.124 Yes
Application google chrome 35.0.1916.125 Yes
Application google chrome 35.0.1916.126 Yes
Application google chrome 35.0.1916.127 Yes
Application google chrome 35.0.1916.128 Yes
Application google chrome 35.0.1916.137 Yes
Application google chrome 35.0.1916.138 Yes
Application google chrome 35.0.1916.140 Yes
Application google chrome 35.0.1916.141 Yes
Application google chrome 35.0.1916.142 Yes
Application google chrome 35.0.1916.149 Yes
Application google chrome 35.0.1916.150 Yes
Application google chrome 35.0.1916.151 Yes

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For google's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.