AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-1716

HIGH · CVSS 7.5 EPSS 1.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-04-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-1716
Severity
HIGH
CVSS
7.5
EPSS
1.93%
Chrome

Original NVD Description

Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."