CVE-2013-2886

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to...

7.5 High

CVE-2013-2886 is a high vulnerability (CVSS 7.5) in Google Chrome, published July 30, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. No source names a fixed version.

What does this mean?

Severity: 7.5 HighCVSS 2.0, NVD
Exploit chance: 1.09%EPSS, 65th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Exploit likelihood

1.09%Down 0.1 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`chromium-browser` Debian:7 From an advisory covering 6 CVEs	before 28.0.1500.95-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 4 moreShow less 27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-2	28.0.1500.95-1~deb7u1
`chromium-browser-stable` Mageia:2 From an advisory covering 6 CVEs	before 28.0.1500.95-1.mga2	28.0.1500.95-1.mga2
`chromium-browser-stable` Mageia:3 From an advisory covering 6 CVEs	before 28.0.1500.95-1.mga3	28.0.1500.95-1.mga3
`chromium-browser-stable` Mageia:3 From an advisory covering 6 CVEs	before 28.0.1500.95-1.mga3.tainted	28.0.1500.95-1.mga3.tainted

What each source reports

NVD Score used7.5

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Record: CVE-2013-2886
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE ListNo score

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Record: CVE-2013-2886
Updated: 2026-11-02

EUVDEUVD-2013-2825No score

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Record: EUVD-2013-2825
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6cqx-9qcg-q4vhNo score

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to...

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Record: GHSA-6cqx-9qcg-q4vh
Updated: 2026-11-02

OSVMGASA-2013-0249No score

Updated chromium-browser-stable packages fix security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities:

Karthik Bhargavan discovered a way to bypass the Same Origin Policy in frame handling (CVE-2013-2881).

Cloudfuzzer discovered a type confusion issue in the V8 javascript library (CVE-2013-2882).

Cloudfuzzer discovered a use-after-free issue in MutationObserver (CVE-2013-2883).

Ivan Fratric of the Google Security Team discovered a use-after-free issue in the DOM implementation (CVE-2013-2884).

Ivan Fratric of the Google Security Team discovered a use-after-free issue in input handling (CVE-2013-2885).

The chrome 28 development team found various issues from internal fuzzing, audits, and other studies (CVE-2013-2886).

This update provides version 28.0.1500.95, which fixes these issues.

Additionally, Google Sync should now work (mga#9851), and playing of media files with certain codecs, such as mp3, should now work with the tainted build (mga#10828) in Mageia 3.

Record: MGASA-2013-0249
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 8 moreShow less