CVE-2014-3172: The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0....

Security readout for executives and security teams

This older Chrome flaw let a malicious or unsafe extension use the Debugger API to attach to restricted internal pages, such as chrome:// URLs, bypassing intended browser access limits. The source bundle identifies Chrome before 37.0.2062.94 as affected, but provides no CVSS score or confirmed active exploitation. Exposure is mainly legacy systems running Google Chrome or Chromium packages older than 37.0.2062.94, especially where browser extensions could use the Debugger API. Modern managed Chrome deployments are unlikely to be exposed if normally updated. Treat this as a legacy browser hygiene issue, not an emergency based on the provided evidence. Prioritize confirmation that old Chrome or Chromium builds are gone, especially on systems that allow unmanaged extensions. Mitigation focus: Upgrade Chrome or Chromium to 37.0.2062.94 or later where applicable.; Apply relevant Linux distribution browser security updates from vendor advisories.; Review enterprise extension policies for Debugger API permissions on legacy browsers..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.