CVE-2013-2835 - CVE House

Status published Medium CVE-2013-2835

Google Chrome OS before 26.0.1410.57 does not properly enforce origin...

5 CVSS

Vulnerability Description

Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-2835

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from google

View All →

CVE-2025-24959

Environment Variable Injection for dotenv API in zx

Low 1

CVE-2024-45601

Local file Inclusion via static file serving functionality in Mesop

High 7.5

CVE-2022-3708

Web Stories <= 1.24.0 - Server Side Request Forgery

Critical 9.6

CVE-2022-31055

Improper Access Control in kctf

High 7.5

CVE-2022-23569

`CHECK`-fails when building invalid tensor shapes in Tensorflow

Medium 6.5

Affected Vendor

google

View all reports →

Affected Software

chrome os

Vulnerable Versions:

0, 26.0.1410.0, 26.0.1410.1, 26.0.1410.3, 26.0.1410.4, 26.0.1410.5, 26.0.1410.6, 26.0.1410.7, 26.0.1410.8, 26.0.1410.9, 26.0.1410.10, 26.0.1410.11, 26.0.1410.12, 26.0.1410.14, 26.0.1410.15, 26.0.1410.16, 26.0.1410.17, 26.0.1410.18, 26.0.1410.19, 26.0.1410.20, 26.0.1410.21, 26.0.1410.22, 26.0.1410.23, 26.0.1410.24, 26.0.1410.25, 26.0.1410.26, 26.0.1410.27, 26.0.1410.28, 26.0.1410.29, 26.0.1410.30, 26.0.1410.31, 26.0.1410.32, 26.0.1410.33, 26.0.1410.34, 26.0.1410.35, 26.0.1410.36, 26.0.1410.37, 26.0.1410.38, 26.0.1410.39, 26.0.1410.40, 26.0.1410.41, 26.0.1410.42, 26.0.1410.43, 26.0.1410.44, 26.0.1410.45, 26.0.1410.46, 26.0.1410.47, 26.0.1410.48, 26.0.1410.49, 26.0.1410.50, 26.0.1410.51, 26.0.1410.52, 26.0.1410.54, 26.0.1410.55

Timeline

Official Publish: April 16th, 2013

Last Modified: September 16th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.