{"id":"CVE-2013-2886","aliases":["DSA-2732-1","EUVD-2013-2825","GHSA-6cqx-9qcg-q4vh","MGASA-2013-0249"],"status":"published","title":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to...","description":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0109,"percentile":0.65563,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2013-07-30T21:00:00Z","modified":"2026-06-16T23:54:09Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1~deb7u1"}]}],"versions":["26.0.1410.43-1","27.0.1453.110-1","27.0.1453.110-1~deb7u1","27.0.1453.110-2","27.0.1453.93-1","27.0.1453.93-1~deb7u1","28.0.1500.71-1","28.0.1500.71-1~deb7u1","28.0.1500.71-2"],"bundled":6},{"source":"osv","ecosystem":"Mageia:2","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1.mga2"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1.mga3"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1500.95-1.mga3.tainted"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"}],"references":[{"url":"http://www.debian.org/security/2013/dsa-2732","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","web"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=249199","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=252712","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17704","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=246205","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=246203","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=261701","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2886"},{"url":"https://github.com/advisories/GHSA-6cqx-9qcg-q4vh"},{"url":"https://advisories.mageia.org/MGASA-2013-0249.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=9851","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10828","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10922","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-2886","description":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.","status":"published","published":"2013-07-30T21:00:00Z","modified":"2024-08-06T15:52:20.511Z","updated_at":"2026-11-02T14:34:56.530545Z"}],"euvd":[{"id":"EUVD-2013-2825","description":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.","status":"published","published":"2013-07-30T21:00:00Z","modified":"2024-08-06T15:52:20Z","updated_at":"2026-11-03T01:56:37.16587Z"}],"ghsa":[{"id":"GHSA-6cqx-9qcg-q4vh","title":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to...","description":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.","status":"published","published":"2022-05-17T00:54:37Z","modified":"2023-02-03T05:02:49Z","updated_at":"2026-11-02T14:53:14.779941Z"}],"nvd":[{"id":"CVE-2013-2886","description":"Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.","status":"published","published":"2013-07-31T13:20:14.03Z","modified":"2026-06-16T23:54:09.03Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:31.592595Z"}],"osv":[{"id":"DSA-2732-1","title":"chromium-browser - several","status":"published","published":"2013-07-31T00:00:00Z","modified":"2026-03-09T01:19:23.429444Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0249","title":"Updated chromium-browser-stable packages fix security vulnerabilities","description":"Updated chromium-browser-stable packages fix security vulnerabilities:\n\nKarthik Bhargavan discovered a way to bypass the Same Origin Policy in frame\nhandling (CVE-2013-2881).\n\nCloudfuzzer discovered a type confusion issue in the V8 javascript library\n(CVE-2013-2882).\n\nCloudfuzzer discovered a use-after-free issue in MutationObserver\n(CVE-2013-2883).\n\nIvan Fratric of the Google Security Team discovered a use-after-free issue in\nthe DOM implementation (CVE-2013-2884).\n\nIvan Fratric of the Google Security Team discovered a use-after-free issue in\ninput handling (CVE-2013-2885).\n\nThe chrome 28 development team found various issues from internal fuzzing,\naudits, and other studies (CVE-2013-2886).\n\nThis update provides version 28.0.1500.95, which fixes these issues.\n\nAdditionally, Google Sync should now work (mga#9851), and playing of media\nfiles with certain codecs, such as mp3, should now work with the tainted\nbuild (mga#10828) in Mageia 3.\n","status":"published","published":"2013-08-17T08:39:42Z","modified":"2026-04-16T06:25:27.585844052Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}