Vulnerability in Google Chrome
CVE-2013-0924
The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
EPSS: 0.011 (63.3th percentile) — read the EPSS interpretation.
Affected products
- Google Chrome — versions 26.0.1410.0, 26.0.1410.1, 26.0.1410.2
- N/a — versions n/a
Weakness classification (CWE)
References
- chrome-cve-admin@google.com (signature, x_refsource_OVAL, vdb-entry)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)