CVE-2013-0924
Status: ModifiedHigh (7.5)—
Severity7.5High · CVSS 2.0
Exploitation probability1.14 %higher than 66% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
CVSS
- Base score
- 7.5
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 1.14 %
- Percentile among all scored CVEs
- 66
- Score date
- 10/21/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-264
References
Show 6 references
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=169632
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html
- https://code.google.com/p/chromium/issues/detail?id=169632
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674
Raw JSON (NVD)
Show
{
"id": "CVE-2013-0924",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "chrome-cve-admin@google.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-03-28T12:18:52.140",
"references": [
{
"url": "http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://code.google.com/p/chromium/issues/detail?id=169632",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://code.google.com/p/chromium/issues/detail?id=169632",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16674",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors."
},
{
"lang": "es",
"value": "La funcionalidad de extensión en Google Chrome versiones anteriores a v26.0.1410.43 no verifica que el uso de las API de permisos es consistente con el fichero de permisos, teniendo un impacto y vectores de ataque no especificados."
}
],
"lastModified": "2026-06-16T23:50:21.993",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F72EE3E3-8EE6-4853-A1B2-6855692537FA",
"versionEndIncluding": "26.0.1410.42"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F4CDAF7-8642-4D9A-AF2B-3A98CE06FF7C"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52A0DF33-B8F0-4AA2-A345-480635491764"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEFD9431-A7BA-48A7-A2A4-4F8A45342FF6"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE3D7FB4-3C50-4E8E-BE5A-E641801FCD9B"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCBEFEAF-4F12-4680-A9F0-6E9CD9C0022C"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14E21FAC-7A9C-4A80-8AAD-B5A979BA5DA3"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6D8F487-A867-4AD6-A499-F04FCF86D3E0"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "692F3B89-3497-4306-AE8B-03E95DDD5DA7"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F33FC703-CBB3-4A3E-B855-2A5B08E4892C"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7409E417-8B13-44D4-9147-49B4DAAAA608"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFDCAE6B-96EC-4AAF-BE38-2D0D2BD3E4F0"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39D7F7CE-181F-4CA6-858E-9A4DC2D5989F"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "419AA074-3C1C-47C8-A73D-4258FC0F2ED6"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DC44188-8111-4638-AED9-8A9DA705166B"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A750031-6940-4B7F-94FD-6BFB5FB3CB06"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E86B5766-B743-479C-89CC-D155AD5102FF"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "105E7299-043D-44BF-A2B5-B840F4A03433"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BA3D5FC-A5A6-4C1A-9A16-D4A004681CB9"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C034C7D8-BDD2-4D46-B59F-1A8D035E1973"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E576200-FB39-4AAC-A33B-F9395CDAC483"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ED327A7-1364-4940-831A-34B2887281E0"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8C53DCD-4099-4D68-BDB7-C9898473C970"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9197B2E8-E9BA-41B2-A210-545F327AD21A"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A86BF63-12CD-41A9-82FF-0C9C851F84A7"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E6FD260-8D91-434D-B87D-909C4070D436"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F79CF3-34F4-42F8-8799-49944EAFDD52"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D665211-DA82-43AB-98AC-EBBD86E096A5"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F042B2F8-4025-48DE-BB44-093F92E58970"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD47238E-6485-4347-8FAE-DA8832514F3F"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D4626AE-3EE8-4CAB-8654-92BC83609AC8"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BE94F92-172B-467E-BC27-4A038D7E0345"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "937DCEB1-13A7-41BA-B890-6DC584498DA3"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F1D2AA2-3FBA-4893-B2A5-60F6AF893AB8"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8236329F-EF2B-4912-B54D-ECA8A5E40A08"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E0AA41-7BC1-4928-879C-319455EF0B68"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E82909AE-45A3-4D96-AA00-AB54990DD8AF"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A3FA9D3-C2E3-430D-8A93-A04D3EF563C1"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B773C98-F324-4BFC-907F-5260F98D8BC3"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F252A00-1752-4A58-A22F-091D881D969A"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E7D31A9-1C01-41B8-8734-2E5BDDA04228"
},
{
"criteria": "cpe:2.3:a:google:chrome:26.0.1410.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56840488-CC3C-48BA-B0FF-AD6948D0A589"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "chrome-cve-admin@google.com"
}