299,455
Total vulnerabilities in the database
The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization.
| Software | From | Fixed in |
|---|---|---|
| canonical / ubuntu_linux | 14.10 | 14.10.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| google / v8 | - | 4.2.77.7.x |
| google / chrome | - | 42.0.2311.60.x |
| debian / debian_linux | 8.0 | 8.0.x |