The host is installed with Google Chrome before 38.0.2125.101 and is prone to a use-after-free vulnerability. The flaw is present in the application, which fail to handle a crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree. Successful exploitation allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.