CVE catalog

CVE-2014-3188

UBUNTU-CVE-2014-3188

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
6.78% · Oct 25, 2026

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuchromium-browser14.0429.0.1547.65-0ubuntu2vulnerable
Ubuntuchromium-browser14.0431.0.1650.63-0ubuntu1~20131204.1vulnerable
Ubuntuchromium-browser14.0432.0.1700.107-0ubuntu1~20140204.977.1vulnerable
Ubuntuchromium-browser14.0433.0.1750.152-0ubuntu1~pkg995.1vulnerable
Ubuntuchromium-browser14.0434.0.1847.116-0ubuntu2vulnerable
Ubuntuchromium-browser14.0436.0.1985.125-0ubuntu1.14.04.0~pkg1029vulnerable
Ubuntuchromium-browser14.0437.0.2062.94-0ubuntu0.14.04.1~pkg1042vulnerable
Ubuntuchromium-browser14.0437.0.2062.120-0ubuntu0.14.04.1~pkg1049vulnerable
Ubuntuchromium-browser14.0438.0.2125.111-0ubuntu0.14.04.1.1061fixed
Ubuntulibv8-3.1416.043.14.5.8-5ubuntu2vulnerable
Ubuntulibv8-3.1418.043.14.5.8-11ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuchromium-browserdeb14.0438.0.2125.111-0ubuntu0.14.04.1.1061Not reportedUBUNTU-CVE-2014-3188Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]