GHSA-78jq-7m93-2fvg

GHSA-78jq-7m93-2fvg PUBLISHED

Record from GitHub Advisory Database · Published May 17, 2022

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

Timeline

May 17, 2022 CVE Published
Apr 9, 2026 Security Advisory
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-78jq-7m93-2fvg
vulnetix vdb fixes GHSA-78jq-7m93-2fvg

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-78jq-7m93-2fvg/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://code.google.com/p/v8/source/detail?r=20375 url
http://lists.opensuse.org/opensuse-updates/2014-05/msg00050.html url
http://secunia.com/advisories/60372 url
http://www.debian.org/security/2014/dsa-2920 url
https://nvd.nist.gov/vuln/detail/CVE-2014-1730 advisory
https://code.google.com/p/v8/source/detail?r=20388 url
http://lists.opensuse.org/opensuse-updates/2014-05/msg00049.html url
http://secunia.com/advisories/58301 url
http://security.gentoo.org/glsa/glsa-201408-16.xml url
https://code.google.com/p/chromium/issues/detail?id=354967 url
https://code.google.com/p/v8/source/detail?r=20377 url
https://code.google.com/p/v8/source/detail?r=20593 url
https://code.google.com/p/v8/source/detail?r=20595 url
http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html url

Look up in the Resolve Platform →