CVE-2014-3188: Google Chrome

High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days.

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

Affected products

• Google Chrome: up to and including 38.0.2125.7
• Google Chrome OS: up to and including 38.0.2125.77
• Red Hat Enterprise Linux Desktop Supplementary: version 6.0 only
• Red Hat Enterprise Linux Server Supplementary: version 6.0 only
• Red Hat Enterprise Linux Server Supplementary Eus: version 6.6.z only
• Red Hat Enterprise Linux Workstation Supplementary: version 6.0 only

Published 2014-10-08. Last modified 2026-06-17.