AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-7906

HIGH · CVSS 7.5 EPSS 1.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-19 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Chrome. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2014-7906
Severity
HIGH
CVSS
7.5
EPSS
1.95%
Chrome

Original NVD Description

Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.