{"id":"CVE-2013-6802","aliases":["DSA-2799-1","EUVD-2013-6604","GHSA-rc6h-cxrg-vv4c"],"status":"published","title":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions...","description":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01425,"percentile":0.73106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-11-16T00:00:00Z","modified":"2026-06-17T00:00:57Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.0.1650.57-1~deb7u1"}]}],"versions":["26.0.1410.43-1","27.0.1453.110-1","27.0.1453.110-1~deb7u1","27.0.1453.110-2","27.0.1453.93-1","27.0.1453.93-1~deb7u1","28.0.1500.71-1","28.0.1500.71-1~deb7u1","28.0.1500.71-2","28.0.1500.95-1","28.0.1500.95-1~deb7u1","28.0.1500.95-2","28.0.1500.95-3","29.0.1547.57-1","29.0.1547.57-1~deb7u1","29.0.1547.57-2","29.0.1547.57-3","29.0.1547.57-3+exp1","30.0.1599.101-1","30.0.1599.101-1~deb7u1","30.0.1599.101-2","30.0.1599.101-3"],"bundled":14}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://code.google.com/p/chromium/issues/detail?id=319125","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=319117","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89201","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6802"},{"url":"http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls"},{"url":"https://github.com/advisories/GHSA-rc6h-cxrg-vv4c"}],"sources":{"cve":[{"id":"CVE-2013-6802","description":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.","status":"published","published":"2013-11-16T15:00:00Z","modified":"2024-08-06T17:46:23.438Z","updated_at":"2026-11-02T14:34:57.499208Z"}],"euvd":[{"id":"EUVD-2013-6604","description":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.","status":"published","published":"2013-11-16T15:00:00Z","modified":"2024-08-06T17:46:23Z","updated_at":"2026-11-03T01:56:25.224612Z"}],"ghsa":[{"id":"GHSA-rc6h-cxrg-vv4c","title":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions...","description":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.","status":"published","published":"2022-05-14T01:48:58Z","modified":"2025-04-11T04:16:07Z","updated_at":"2026-11-02T15:01:14.923786Z"}],"nvd":[{"id":"CVE-2013-6802","description":"Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.","status":"published","published":"2013-11-18T05:23:57.91Z","modified":"2026-06-17T00:00:57.707Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"DSA-2799-1","title":"chromium-browser - several","status":"published","published":"2013-11-16T00:00:00Z","modified":"2026-03-09T01:22:14.546332Z","updated_at":"2026-11-02T15:46:15.489951Z"}]}}