Unrated severityNVD Advisory· Published Oct 8, 2014· Updated Jun 17, 2026

CVE-2014-3188

Description

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=38.0.2125.7
- (no CPE)range: <38.0.2125.101
Google/ChromeOS2 versions
cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*range: <=38.0.2125.77
- (no CPE)range: <38.0.2125.101
Red Hat/Enterprise Linux Workstation Supplementary2 versions
cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Supplementary
cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Supplementary Eus
cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*
Google/V8llm-fuzzy
osv-coords
pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
Range: < 55.0.2883.75-3.1

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2014-3188

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions