CVE-2014-3155: net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote...

Security readout for executives and security teams

This is an old Google Chrome browser vulnerability. Before version 35.0.1916.153, Chrome’s SPDY networking code could mishandle an internal write queue, letting a remote attacker cause a denial of service through an out-of-bounds read. The sources describe availability impact, not data theft or code execution. Exposure is mainly legacy systems running Google Chrome earlier than 35.0.1916.153. Modern managed fleets are unlikely to be exposed unless old browser builds remain on unsupported endpoints, frozen appliances, lab images, or archival virtual desktops. Treat this as legacy hygiene unless old Chrome versions are still present. It is remote and browser-exposed, but the documented impact is denial of service and the bundle contains no active exploitation evidence. Mitigation focus: Upgrade Google Chrome to 35.0.1916.153 or later.; Remove unsupported legacy Chrome builds from managed endpoints.; Check vendor and distribution advisories for package-specific update guidance..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.