# CVEs published 2014-08-27

12 CVEs were published on August 27, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3168](https://cve.now/CVE-2014-3168.md): Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to… (no CVSS)
- [CVE-2014-3169](https://cve.now/CVE-2014-3169.md): Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before… (no CVSS)
- [CVE-2014-3170](https://cve.now/CVE-2014-3170.md): extensions/common/url\_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\\0' character in a host name, which… (no CVSS)
- [CVE-2014-3171](https://cve.now/CVE-2014-3171.md): Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a… (no CVSS)
- [CVE-2014-3172](https://cve.now/CVE-2014-3172.md): The Debugger extension API in browser/extensions/api/debugger/debugger\_api.cc in Google Chrome before 37.0.2062.94 does not validate a… (no CVSS)
- [CVE-2014-3173](https://cve.now/CVE-2014-3173.md): The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw… (no CVSS)
- [CVE-2014-3174](https://cve.now/CVE-2014-3174.md): modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not… (no CVSS)
- [CVE-2014-3175](https://cve.now/CVE-2014-3175.md): Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2014-3176](https://cve.now/CVE-2014-3176.md): Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows… (no CVSS)
- [CVE-2014-3177](https://cve.now/CVE-2014-3177.md): Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows… (no CVSS)
- [CVE-2014-3575](https://cve.now/CVE-2014-3575.md): The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data… (no CVSS)
- [CVE-2014-3596](https://cve.now/CVE-2014-3596.md): The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's… (no CVSS, org.apache.axis:axis · axis:axis)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-08-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.