CVE-2014-1703: Google Chrome

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.

Affected products

• Google Chrome: up to and including 33.0.1750.146; version 33.0.1750.0 only; version 33.0.1750.1 only; version 33.0.1750.2 only; version 33.0.1750.3 only; version 33.0.1750.4 only; …

Published 2014-03-16. Last modified 2026-06-17.