CVEvulnerability

CVE-2013-0924

7.5 HIGH Published 2013-03-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.

Affected configurations

• google chrome (<= 26.0.1410.42) • google chrome 26.0.1410.0 • google chrome 26.0.1410.1 • google chrome 26.0.1410.2 • google chrome 26.0.1410.3 • google chrome 26.0.1410.4 • google chrome 26.0.1410.5 • google chrome 26.0.1410.6 • google chrome 26.0.1410.7 • google chrome 26.0.1410.8 • google chrome 26.0.1410.9 • google chrome 26.0.1410.10 • google chrome 26.0.1410.11 • google chrome 26.0.1410.12 • google chrome 26.0.1410.14 • google chrome 26.0.1410.15 • google chrome 26.0.1410.16 • google chrome 26.0.1410.17 • google chrome 26.0.1410.18 • google chrome 26.0.1410.19 • google chrome 26.0.1410.20 • google chrome 26.0.1410.21 • google chrome 26.0.1410.22 • google chrome 26.0.1410.23 • google chrome 26.0.1410.24 • google chrome 26.0.1410.25 • google chrome 26.0.1410.26 • google chrome 26.0.1410.27 • google chrome 26.0.1410.28 • google chrome 26.0.1410.29 • google chrome 26.0.1410.30 • google chrome 26.0.1410.31 • google chrome 26.0.1410.32 • google chrome 26.0.1410.33 • google chrome 26.0.1410.34 • google chrome 26.0.1410.35 • google chrome 26.0.1410.36 • google chrome 26.0.1410.37 • google chrome 26.0.1410.38 • google chrome 26.0.1410.39 • google chrome 26.0.1410.40 • google chrome 26.0.1410.41

Related

Weakness · not in database (1)

References