CVE-2013-0924 - The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors

Back Back to CVE browser

HIGH

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors

Published Mar 28, 2013

7.5

HIGH

CVSS 2.0

EPSS 1.14%

Description

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
x_refsource_CONFIRM
https://code.google.com/p/chromium/issues/detail?id=169632
x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html		x_refsource_CONFIRM
https://code.google.com/p/chromium/issues/detail?id=169632		x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Mar 28, 2013

Updated Aug 6, 2024

Reserved Jan 7, 2013

Link CVE-2013-0924

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-0924

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-0924