{"id":"CVE-2013-2883","aliases":["DSA-2732-1","EUVD-2013-2822","GHSA-p5xc-6ph9-vw8m","MGASA-2013-0249"],"status":"published","title":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to...","description":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01272,"percentile":0.70034,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-399"],"published":"2013-07-30T21:00:00Z","modified":"2026-06-16T23:54:08Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1~deb7u1"}]}],"versions":["26.0.1410.43-1","27.0.1453.110-1","27.0.1453.110-1~deb7u1","27.0.1453.110-2","27.0.1453.93-1","27.0.1453.93-1~deb7u1","28.0.1500.71-1","28.0.1500.71-1~deb7u1","28.0.1500.71-2"],"bundled":6},{"source":"osv","ecosystem":"Mageia:2","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1.mga2"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1.mga3"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1.mga3.tainted"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"}],"references":[{"url":"http://www.debian.org/security/2013/dsa-2732","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17525","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=260165","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://src.chromium.org/viewvc/blink?revision=154264\u0026view=revision","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2883"},{"url":"https://github.com/advisories/GHSA-p5xc-6ph9-vw8m"},{"url":"https://advisories.mageia.org/MGASA-2013-0249.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=9851","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10828","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10922","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-2883","description":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.","status":"published","published":"2013-07-30T21:00:00Z","modified":"2024-08-06T15:52:20.434Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-2822","description":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.","status":"published","published":"2013-07-30T21:00:00Z","modified":"2024-08-06T15:52:20Z","updated_at":"2026-11-03T01:56:37.16587Z"}],"ghsa":[{"id":"GHSA-p5xc-6ph9-vw8m","title":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to...","description":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.","status":"published","published":"2022-05-17T00:54:38Z","modified":"2023-02-03T05:02:47Z","updated_at":"2026-11-02T14:53:14.247345Z"}],"nvd":[{"id":"CVE-2013-2883","description":"Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.","status":"published","published":"2013-07-31T13:20:13.723Z","modified":"2026-06-16T23:54:08.64Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:31.592595Z"}],"osv":[{"id":"DSA-2732-1","title":"chromium-browser - several","status":"published","published":"2013-07-31T00:00:00Z","modified":"2026-03-09T01:19:23.429444Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0249","title":"Updated chromium-browser-stable packages fix security vulnerabilities","description":"Updated chromium-browser-stable packages fix security vulnerabilities:\n\nKarthik Bhargavan discovered a way to bypass the Same Origin Policy in frame\nhandling (CVE-2013-2881).\n\nCloudfuzzer discovered a type confusion issue in the V8 javascript library\n(CVE-2013-2882).\n\nCloudfuzzer discovered a use-after-free issue in MutationObserver\n(CVE-2013-2883).\n\nIvan Fratric of the Google Security Team discovered a use-after-free issue in\nthe DOM implementation (CVE-2013-2884).\n\nIvan Fratric of the Google Security Team discovered a use-after-free issue in\ninput handling (CVE-2013-2885).\n\nThe chrome 28 development team found various issues from internal fuzzing,\naudits, and other studies (CVE-2013-2886).\n\nThis update provides version 28.0.1500.95, which fixes these issues.\n\nAdditionally, Google Sync should now work (mga#9851), and playing of media\nfiles with certain codecs, such as mp3, should now work with the tainted\nbuild (mga#10828) in Mageia 3.\n","status":"published","published":"2013-08-17T08:39:42Z","modified":"2026-04-16T06:25:27.585844052Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}