CVE-2014-7923: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944...

Security readout for executives and security teams

CVE-2014-7923 is a flaw in ICU 52 regular expression handling, also noted as affecting Google Chrome before 40.0.2214.91. A remote attacker could cause denial of service through memory corruption, with other impact described only as possible and unspecified. Exposure is most likely where legacy Chrome before 40.0.2214.91 or software embedding ICU 52 regex code remains in use. Vendor advisories suggest operating-system packages were patched, but exact affected package versions must be verified per vendor guidance. Treat this as a legacy dependency risk rather than a current emergency unless vulnerable ICU or old Chrome is still deployed. Patch confirmed exposure, especially on systems processing untrusted input, but the supplied sources do not support active-exploitation urgency. Mitigation focus: Upgrade Chrome to 40.0.2214.91 or later where applicable.; Update ICU packages using the relevant vendor advisory.; Confirm embedded ICU copies are not based on vulnerable ICU 52 code..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.