# CVEs published 2014-08-27

12 CVEs were published on August 27, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3168](https://cve.now/CVE-2014-3168.md): Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to ca (no CVSS)
- [CVE-2014-3169](https://cve.now/CVE-2014-3169.md): Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94, (no CVSS)
- [CVE-2014-3170](https://cve.now/CVE-2014-3170.md): extensions/common/url\_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\\0' character in a host name, which allows (no CVSS)
- [CVE-2014-3171](https://cve.now/CVE-2014-3171.md): Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a d (no CVSS)
- [CVE-2014-3172](https://cve.now/CVE-2014-3172.md): The Debugger extension API in browser/extensions/api/debugger/debugger\_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's (no CVSS)
- [CVE-2014-3173](https://cve.now/CVE-2014-3173.md): The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw bu (no CVSS)
- [CVE-2014-3174](https://cve.now/CVE-2014-3174.md): modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not pr (no CVSS)
- [CVE-2014-3175](https://cve.now/CVE-2014-3175.md): Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2014-3176](https://cve.now/CVE-2014-3176.md): Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows rem (no CVSS)
- [CVE-2014-3177](https://cve.now/CVE-2014-3177.md): Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows rem (no CVSS)
- [CVE-2014-3575](https://cve.now/CVE-2014-3575.md): The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data i (no CVSS)
- [CVE-2014-3596](https://cve.now/CVE-2014-3596.md): The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's C (no CVSS, org.apache.axis:axis · axis:axis)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-08-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.