Description
Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2939-1 | chromium-browser security update |
EUVD |
EUVD-2014-1821 | Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)." |
References
History
Wed, 16 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2024-08-06T09:50:11.275Z
Reserved: 2014-01-29T00:00:00.000Z
Link: CVE-2014-1747
No data.
Status : Modified
Published: 2014-05-21T11:14:09.800
Modified: 2026-05-06T22:30:45.220
Link: CVE-2014-1747
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD