AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-1701

MEDIUM · CVSS 4.3 EPSS 1.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-03-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-1701
Severity
MEDIUM
CVSS
4.3
EPSS
1.19%
Chrome

Original NVD Description

The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.