CVE-2014-7924: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.

Affected products

• Google Chrome: up to and including 40.0.2214.85

Published 2015-01-22. Last modified 2026-06-17.