CVE-2014-7941: The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Goog...

Security readout for executives and security teams

CVE-2014-7941 is an old Google Chrome crash bug fixed before version 40.0.2214.91. A crafted X11-related input could make Chrome read outside expected memory and deny service. The public bundle does not indicate data theft, code execution, or active exploitation. Exposure is most likely on legacy Linux or X11-based systems running Chrome or Chromium-era packages older than 40.0.2214.91. Current auto-updated Chrome installations are unlikely to be exposed, but kiosks, frozen images, or unsupported distributions should be checked. Treat this as a legacy availability risk. It should not disrupt modern managed Chrome environments, but any unsupported browser estate should be cleaned up because old browser flaws accumulate quickly and are hard to validate safely. Mitigation focus: Upgrade Chrome or Chromium packages to 40.0.2214.91 or later.; Apply relevant distribution advisories from Red Hat, Gentoo, or openSUSE where applicable.; Retire unsupported browser builds from desktops, kiosks, and gold images..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.