CVE-2014-7935: Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google...

Security readout for executives and security teams

This is an old Google Chrome memory-safety flaw in the speech/text-to-speech implementation. A malicious web interaction could crash the browser and may have had other unspecified impact. The evidence provided identifies Chrome before 40.0.2214.91 as affected, with no confirmed active exploitation. Exposure is most likely limited to legacy Chrome or Chromium-derived packages older than 40.0.2214.91, including old Linux distribution builds referenced by vendor advisories. Current managed browsers are unlikely to be exposed if normally updated. Treat as a legacy hygiene issue unless old browser builds remain in production. It should not outrank actively exploited vulnerabilities, but any internet-facing workstation browser this old represents broad security debt. Mitigation focus: Upgrade Google Chrome or Chromium packages to 40.0.2214.91 or later.; Apply relevant distribution security updates from Gentoo, Red Hat, or openSUSE.; Remove unsupported legacy browser builds from managed endpoints..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.