VYPR
Unrated severityNVD Advisory· Published Mar 9, 2015· Updated Jun 17, 2026

CVE-2014-9689

CVE-2014-9689

Description

content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for ondeviceorientation events, a different vulnerability than CVE-2015-1231.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Google/Chrome2 versions
    cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=40.0.2214.115
    • (no CPE)range: <41.0.2272.76

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.