CVE-2014-7926: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944...

Security readout for executives and security teams

This is an old ICU regular-expression bug that affected ICU 52 and Google Chrome before 40.0.2214.91. A remote attacker could trigger memory corruption and denial of service through regex handling. The supplied sources do not show active exploitation or a CVSS score. Exposure is most plausible in legacy Chrome installations before 40.0.2214.91 or products using ICU 52 regex code before revision 292944. Vendor advisories indicate downstream packaging impact, but the bundle does not enumerate precise affected OS package versions. Treat this as a legacy exposure cleanup item. Prioritize quickly if old browsers or ICU-linked services still process untrusted content; otherwise handle through normal patch assurance. Mitigation focus: Upgrade Chrome to 40.0.2214.91 or later where legacy Chrome exists.; Update ICU 52 to a build including SVN revision 292944 or later.; Apply relevant vendor advisories for Ubuntu, Red Hat, Gentoo, Oracle, and other listed platforms..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.