CVE-2013-2919
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a...
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
- Record
CVE-2013-2919- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
- Record
CVE-2013-2919- Updated
- 2026-11-02
EUVDEUVD-2013-2858 No score
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
- Record
EUVD-2013-2858- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wp22-6q5v-pph8 No score
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a...
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
- Record
GHSA-wp22-6q5v-pph8- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2013-0306 No score
Updated chromium-browser-stable packages fix security vulnerabilities
This updates chromium-browser to the latest stable version, fixing multiple security vulnerabilities.
Security fixes: CVE-2013-2906: Races in Web Audio CVE-2013-2907: Out of bounds read in Window.prototype object CVE-2013-2908: Address bar spoofing related to the "204 No Content" status code CVE-2013-2909: Use after free in inline-block rendering CVE-2013-2910: Use-after-free in Web Audio CVE-2013-2911: Use-after-free in XSLT CVE-2013-2912: Use-after-free in PPAPI CVE-2013-2913: Use-after-free in XML document parsing CVE-2013-2914: Use after free in the Windows color chooser dialog CVE-2013-2915: Address bar spoofing via a malformed scheme CVE-2013-2916: Address bar spoofing related to the "204 No Content" status code CVE-2013-2917: Out of bounds read in Web Audio CVE-2013-2918: Use-after-free in DOM CVE-2013-2919: Memory corruption in V8 CVE-2013-2920: Out of bounds read in URL parsing CVE-2013-2921: Use-after-free in resource loader CVE-2013-2922: Use-after-free in template element CVE-2013-2923: Various fixes from internal audits, fuzzing and other initiatives CVE-2013-2924: Use-after-free in ICU. Upstream bug
- Record
MGASA-2013-0306- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2919 No score
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
- Record
UBUNTU-CVE-2013-2919- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:7 From an advisory covering 22 CVEs |
before 30.0.1599.101-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 13 moreShow less27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-329.0.1547.57-129.0.1547.57-1~deb7u129.0.1547.57-229.0.1547.57-329.0.1547.57-3+exp1 |
30.0.1599.101-1~deb7u1 |
chromium-browser-stableMageia:2 From an advisory covering 19 CVEs |
before 30.0.1599.66-1.mga2 | 30.0.1599.66-1.mga2 |
chromium-browser-stableMageia:3 From an advisory covering 19 CVEs |
before 30.0.1599.66-1.mga3 | 30.0.1599.66-1.mga3 |
chromium-browser-stableMageia:3 From an advisory covering 19 CVEs |
before 30.0.1599.66-1.mga3.tainted | 30.0.1599.66-1.mga3.tainted |
libv8-3.14Ubuntu:16.04:LTS |
All versions, plus listed versions 3.14.5.8-5ubuntu2 |
None known |
libv8-3.14Ubuntu:18.04:LTS |
All versions, plus listed versions 3.14.5.8-11ubuntu1 |
None known |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2919 is a high vulnerability (CVSS 7.5) in Google Chrome, published October 2, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. No source names a fixed version.
References
googlechromereleases.blogspot.com/2013/10/stable-channel-update.html
code.google.com/p/chromium/issues/detail?id=282736
lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
debian.org/security/2013/dsa-2785
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18840
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-2919
github.com/advisories/GHSA-wp22-6q5v-pph8
advisories.mageia.org/MGASA-2013-0306.html
googlechromereleases.blogspot.ro/2013/10/stable-channel-update.html
bugs.mageia.org/show_bug.cgi?id=11361
ubuntu.com/security/CVE-2013-2919
cve.org/CVERecord?id=CVE-2013-2919
suse.com/security/cve/CVE-2011-3015
Left out here: 2,146 references. The JSON record has them.