AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-3166

MEDIUM · CVSS 4.3 EPSS 1.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-08-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-3166
Severity
MEDIUM
CVSS
4.3
EPSS
1.50%
Windows Linux Android Chrome

Original NVD Description

The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.