CVE-2013-0921
Status: ModifiedMedium (6.8)—
Severity6.8Medium · CVSS 2.0
Exploitation probability0.76 %higher than 55% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site.
CVSS
- Base score
- 6.8
- Version
- 2.0
- Vector
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.76 %
- Percentile among all scored CVEs
- 55
- Score date
- 10/21/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-264
References
Show 6 references
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=174943
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16670
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=174943
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16670
Raw JSON (NVD)
Show
{
"id": "CVE-2013-0921",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "chrome-cve-admin@google.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-03-28T12:18:52.090",
"references": [
{
"url": "http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://code.google.com/p/chromium/issues/detail?id=174943",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16670",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://code.google.com/p/chromium/issues/detail?id=174943",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16670",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site."
},
{
"lang": "es",
"value": "La funcionalidad de separación de sitios web en Google Chrome versiones anteriores a v.26.0.1410.43 no refuerza adecuadamente el uso de procesos separados, facilitando a atacantes remotos el saltar las restricciones de acceso implementadas mediante un sitio web manipulado."
}
],
"lastModified": "2026-06-16T23:50:21.667",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F72EE3E3-8EE6-4853-A1B2-6855692537FA",
"versionEndIncluding": "26.0.1410.42"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F4CDAF7-8642-4D9A-AF2B-3A98CE06FF7C"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52A0DF33-B8F0-4AA2-A345-480635491764"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEFD9431-A7BA-48A7-A2A4-4F8A45342FF6"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE3D7FB4-3C50-4E8E-BE5A-E641801FCD9B"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCBEFEAF-4F12-4680-A9F0-6E9CD9C0022C"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14E21FAC-7A9C-4A80-8AAD-B5A979BA5DA3"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6D8F487-A867-4AD6-A499-F04FCF86D3E0"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "692F3B89-3497-4306-AE8B-03E95DDD5DA7"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F33FC703-CBB3-4A3E-B855-2A5B08E4892C"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7409E417-8B13-44D4-9147-49B4DAAAA608"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFDCAE6B-96EC-4AAF-BE38-2D0D2BD3E4F0"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39D7F7CE-181F-4CA6-858E-9A4DC2D5989F"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "419AA074-3C1C-47C8-A73D-4258FC0F2ED6"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DC44188-8111-4638-AED9-8A9DA705166B"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A750031-6940-4B7F-94FD-6BFB5FB3CB06"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E86B5766-B743-479C-89CC-D155AD5102FF"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "105E7299-043D-44BF-A2B5-B840F4A03433"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BA3D5FC-A5A6-4C1A-9A16-D4A004681CB9"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C034C7D8-BDD2-4D46-B59F-1A8D035E1973"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E576200-FB39-4AAC-A33B-F9395CDAC483"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ED327A7-1364-4940-831A-34B2887281E0"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8C53DCD-4099-4D68-BDB7-C9898473C970"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9197B2E8-E9BA-41B2-A210-545F327AD21A"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A86BF63-12CD-41A9-82FF-0C9C851F84A7"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E6FD260-8D91-434D-B87D-909C4070D436"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F79CF3-34F4-42F8-8799-49944EAFDD52"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D665211-DA82-43AB-98AC-EBBD86E096A5"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F042B2F8-4025-48DE-BB44-093F92E58970"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD47238E-6485-4347-8FAE-DA8832514F3F"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D4626AE-3EE8-4CAB-8654-92BC83609AC8"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BE94F92-172B-467E-BC27-4A038D7E0345"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "937DCEB1-13A7-41BA-B890-6DC584498DA3"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F1D2AA2-3FBA-4893-B2A5-60F6AF893AB8"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8236329F-EF2B-4912-B54D-ECA8A5E40A08"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E0AA41-7BC1-4928-879C-319455EF0B68"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E82909AE-45A3-4D96-AA00-AB54990DD8AF"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A3FA9D3-C2E3-430D-8A93-A04D3EF563C1"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B773C98-F324-4BFC-907F-5260F98D8BC3"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F252A00-1752-4A58-A22F-091D881D969A"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E7D31A9-1C01-41B8-8734-2E5BDDA04228"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56840488-CC3C-48BA-B0FF-AD6948D0A589"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "chrome-cve-admin@google.com"
}