Unrated severityNVD Advisory· Published Jan 22, 2015· Updated Jun 17, 2026
CVE-2014-7939
CVE-2014-7939
Description
Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*
- Range: <40.0.2214.91
Patches
Vulnerability mechanics
References
9- googlechromereleases.blogspot.com/2015/01/stable-update.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0093.htmlnvd
- secunia.com/advisories/62383nvd
- secunia.com/advisories/62665nvd
- security.gentoo.org/glsa/glsa-201502-13.xmlnvd
- www.securityfocus.com/bid/72288nvd
- www.securitytracker.com/id/1031623nvd
- code.google.com/p/chromium/issues/detailnvd
News mentions
0No linked articles in our index yet.