CVE-2014-7928: hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with h...

Security readout for executives and security teams

CVE-2014-7928 is an old Google V8 issue in Chrome before 40.0.2214.91. A malicious web page could use crafted JavaScript involving array copying to corrupt memory, causing denial of service and possibly other unspecified impact. The source bundle does not provide CVSS, CWE, or confirmed exploitation evidence. Exposure is mainly legacy Chrome/Chromium or products embedding an affected V8 version from before Chrome 40.0.2214.91. Modern managed browsers are unlikely to be exposed, but old kiosks, offline systems, packaged apps, and embedded Chromium runtimes should be checked. Treat this as a legacy exposure check rather than a current emergency unless old Chrome, Chromium, or embedded V8 remains in use. The business risk is concentrated in systems that still render untrusted web content with outdated browser engines. Mitigation focus: Update Chrome or Chromium to 40.0.2214.91 or later.; Apply relevant distribution browser updates from Ubuntu, Gentoo, Red Hat, or openSUSE advisories.; Inventory applications embedding old Chromium or V8 runtimes..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.