CVE-2014-7928: Google Chrome

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.

Affected products

• Google Chrome: up to and including 40.0.2214.85

Published 2015-01-22. Last modified 2026-06-17.