← Back

CVE-2014-1748

nvd nist
Published: May 21, 2014Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.

Affected (80)

Products: Google: Chrome
1 product
Chrome
Configuration A
80 vulnerable
Vulnerable SoftwareAffected Versions
Google
Up to 35.0.1916.113
Version 35.0.1916.0
Version 35.0.1916.101
Version 35.0.1916.103
Version 35.0.1916.104
Version 35.0.1916.105
Version 35.0.1916.106
Version 35.0.1916.107
Version 35.0.1916.108
Version 35.0.1916.109
Version 35.0.1916.10
Version 35.0.1916.110
Version 35.0.1916.111
Version 35.0.1916.112
Version 35.0.1916.11
Version 35.0.1916.13
Version 35.0.1916.14
Version 35.0.1916.15
Version 35.0.1916.17
Version 35.0.1916.18
Version 35.0.1916.19
Version 35.0.1916.1
Version 35.0.1916.20
Version 35.0.1916.21
Version 35.0.1916.22
Version 35.0.1916.23
Version 35.0.1916.27
Version 35.0.1916.2
Version 35.0.1916.31
Version 35.0.1916.32
Version 35.0.1916.33
Version 35.0.1916.34
Version 35.0.1916.35
Version 35.0.1916.36
Version 35.0.1916.37
Version 35.0.1916.38
Version 35.0.1916.39
Version 35.0.1916.3
Version 35.0.1916.40
Version 35.0.1916.41
Version 35.0.1916.42
Version 35.0.1916.43
Version 35.0.1916.44
Version 35.0.1916.45
Version 35.0.1916.46
Version 35.0.1916.47
Version 35.0.1916.48
Version 35.0.1916.49
Version 35.0.1916.4
Version 35.0.1916.51
Version 35.0.1916.52
Version 35.0.1916.54
Version 35.0.1916.56
Version 35.0.1916.57
Version 35.0.1916.59
Version 35.0.1916.5
Version 35.0.1916.61
Version 35.0.1916.68
Version 35.0.1916.69
Version 35.0.1916.6
Version 35.0.1916.71
Version 35.0.1916.72
Version 35.0.1916.74
Version 35.0.1916.77
Version 35.0.1916.7
Version 35.0.1916.80
Version 35.0.1916.82
Version 35.0.1916.84
Version 35.0.1916.85
Version 35.0.1916.86
Version 35.0.1916.88
Version 35.0.1916.8
Version 35.0.1916.90
Version 35.0.1916.92
Version 35.0.1916.93
Version 35.0.1916.95
Version 35.0.1916.96
Version 35.0.1916.98
Version 35.0.1916.99
Version 35.0.1916.9

References (28)

Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.