CVE-2013-2872 - CVE House

Status published Medium CVE-2013-2872

Google Chrome before 28.0.1500.71 on Mac OS X does not...

5 CVSS

Vulnerability Description

Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-2872

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from google

View All →

CVE-2025-24959

Environment Variable Injection for dotenv API in zx

Low 1

CVE-2024-45601

Local file Inclusion via static file serving functionality in Mesop

High 7.5

CVE-2022-3708

Web Stories <= 1.24.0 - Server Side Request Forgery

Critical 9.6

CVE-2022-31055

Improper Access Control in kctf

High 7.5

CVE-2022-23569

`CHECK`-fails when building invalid tensor shapes in Tensorflow

Medium 6.5

Affected Vendor

google

View all reports →

Affected Software

chrome

Vulnerable Versions:

0, 28.0.1500.0, 28.0.1500.2, 28.0.1500.3, 28.0.1500.4, 28.0.1500.5, 28.0.1500.6, 28.0.1500.8, 28.0.1500.9, 28.0.1500.10, 28.0.1500.11, 28.0.1500.12, 28.0.1500.13, 28.0.1500.14, 28.0.1500.15, 28.0.1500.16, 28.0.1500.17, 28.0.1500.18, 28.0.1500.19, 28.0.1500.20, 28.0.1500.21, 28.0.1500.22, 28.0.1500.23, 28.0.1500.24, 28.0.1500.25, 28.0.1500.26, 28.0.1500.27, 28.0.1500.28, 28.0.1500.29, 28.0.1500.31, 28.0.1500.32, 28.0.1500.33, 28.0.1500.34, 28.0.1500.35, 28.0.1500.36, 28.0.1500.37, 28.0.1500.38, 28.0.1500.39, 28.0.1500.40, 28.0.1500.41, 28.0.1500.42, 28.0.1500.43, 28.0.1500.44, 28.0.1500.45, 28.0.1500.46, 28.0.1500.47, 28.0.1500.48, 28.0.1500.49, 28.0.1500.50, 28.0.1500.51, 28.0.1500.52, 28.0.1500.53, 28.0.1500.54, 28.0.1500.56, 28.0.1500.58, 28.0.1500.59, 28.0.1500.60, 28.0.1500.61, 28.0.1500.62, 28.0.1500.63, 28.0.1500.64, 28.0.1500.66, 28.0.1500.68

Timeline

Official Publish: July 10th, 2013

Last Modified: September 16th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.