{"id":"CVE-2013-0912","aliases":["EUVD-2013-0923","GHSA-fhmr-v3c3-9394","UBUNTU-CVE-2013-0912"],"status":"published","title":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code...","description":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04267,"percentile":0.91147,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2013-03-11T10:00:00Z","modified":"2026-06-16T23:50:20Z","products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013/","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://twitter.com/thezdi/statuses/309460019131346944","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=180763","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://support.apple.com/kb/HT5704","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Apr/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://support.apple.com/kb/HT5701","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16274","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0912"},{"url":"http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013"},{"url":"https://github.com/advisories/GHSA-fhmr-v3c3-9394"},{"url":"https://ubuntu.com/security/CVE-2013-0912","tags":["report"]},{"url":"http://googlechromereleases.blogspot.de/2013/03/stable-channel-update_7.html","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0912","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-0912","description":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"","status":"published","published":"2013-03-11T10:00:00Z","modified":"2024-08-06T14:41:48.279Z","updated_at":"2026-11-02T14:34:59.551717Z"}],"euvd":[{"id":"EUVD-2013-0923","description":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"","status":"published","published":"2013-03-11T10:00:00Z","modified":"2024-08-06T14:41:48Z","updated_at":"2026-11-03T01:56:43.306852Z"}],"ghsa":[{"id":"GHSA-fhmr-v3c3-9394","title":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code...","description":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"","status":"published","published":"2022-05-17T00:56:47Z","modified":"2025-04-11T04:09:14Z","cwes":["CWE-94"],"updated_at":"2026-11-02T15:01:13.537017Z"}],"nvd":[{"id":"CVE-2013-0912","description":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"","status":"published","published":"2013-03-11T10:55:01.04Z","modified":"2026-06-16T23:50:20.5Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:02:24.091325Z"}],"osv":[{"id":"UBUNTU-CVE-2013-0912","description":"WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"","status":"withdrawn","published":"2013-03-11T10:55:00Z","modified":"2025-07-16T07:31:07.876235Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}