CVE-2014-1708: Google Chrome OS

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Google Chrome OS: up to and including 33.0.1750.149; version 33.0.1750.2 only; version 33.0.1750.5 only; version 33.0.1750.16 only; version 33.0.1750.29 only; version 33.0.1750.51 only; …

Published 2014-03-16. Last modified 2026-06-17.