CVE-2014-1713: Google Chrome

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.

Affected products

• Google Chrome: before 33.0.1750.152 (fixed in 33.0.1750.152); before 33.0.1750.154 (fixed in 33.0.1750.154)

Published 2014-03-16. Last modified 2026-06-17.