{"id":"CVE-2009-2935","aliases":["EUVD-2009-2923","GHSA-vvc2-xvcw-8qmf"],"status":"published","title":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended...","description":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05692,"percentile":0.93059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2009-08-27T16:31:00Z","modified":"2026-06-16T23:10:32Z","products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/2420","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://osvdb.org/57421","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/36417","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36149","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022773","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=18639","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52902","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2935"},{"url":"https://github.com/advisories/GHSA-vvc2-xvcw-8qmf"}],"sources":{"cve":[{"id":"CVE-2009-2935","description":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.","status":"published","published":"2009-08-27T16:31:00Z","modified":"2024-08-07T06:07:37.4Z","updated_at":"2026-11-02T14:33:23.395558Z"}],"euvd":[{"id":"EUVD-2009-2923","description":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.","status":"published","published":"2009-08-27T16:31:00Z","modified":"2024-08-07T06:07:37Z","updated_at":"2026-11-03T01:39:15.535048Z"}],"ghsa":[{"id":"GHSA-vvc2-xvcw-8qmf","title":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended...","description":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.","status":"published","published":"2022-05-02T03:40:08Z","modified":"2023-01-31T05:08:05Z","updated_at":"2026-11-02T14:49:19.883163Z"}],"nvd":[{"id":"CVE-2009-2935","description":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.","status":"published","published":"2009-08-27T17:00:01.127Z","modified":"2026-06-16T23:10:32.09Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:36.596719Z"}]}}